Corrective controls are intended to do what?

• A. Respond to and recover from incidents (e.g., incident response, backups)
• B. Prevent attacks before they occur
• C. Prohibit access by unauthorized users
• D. Monitor network traffic

Answer: (A)

Corrective controls focus on recovery and remediation after an incident to restore operations and minimize damage. They’re activated once something has occurred and include actions like incident response procedures, backups, disaster recovery plans, and steps to return systems to normal. This distinguishes them from preventive controls, which aim to stop incidents before they happen, and from detective controls, which identify and alert to issues as they occur. It’s not about restricting access or monitoring traffic, which relate to other control categories. Therefore, describing actions that respond to and recover from incidents best captures what corrective controls are designed to do.