Which of the following security strategies allows a company to limit damage to internal systems and provides loss control?

Restoration and recovery strategies focus on returning systems to normal operation after an incident, not on limiting damage during one.

Deterrent strategies aim to discourage attackers from attempting an attack in the first place, not to limit damage after one begins.

Containment strategies directly address limiting damage to internal systems and controlling loss by isolating affected resources and stopping an incident from spreading. This is a key phase in incident response where the goal is to bound the impact rather than fully recover or deter. Examples include network segmentation, disabling compromised accounts, and quarantining infected systems.

Detection strategies identify that an incident is occurring but do not themselves limit damage or control losses.