What term describes a control designed to correct errors, omissions and unauthorized uses or intrusions after they are detected?

What term describes a control designed to correct errors, omissions and unauthorized uses or intrusions after they are detected?

• A. Detective control
• B. Corrective control
• C. Control weakness
• D. Business impact analysis (BIA)

Answer: (B)

Corrective controls are designed to repair damage and restore operations after an error, omission, or unauthorized action has been detected. They focus on remediation and reducing residual risk by bringing systems back to normal and preventing recurrence. Examples include restoring data from backups after a loss, applying patches to fix exploited vulnerabilities, and reconfiguring access controls to prevent a repeat incident.

Detective controls identify and report issues as they occur but don’t fix them; preventive controls aim to stop incidents before they happen; a business impact analysis is a risk assessment activity, not a type of control.