ISC2 Exam CSSLP Topic 6 Question 60 Discussion

Preventive controls are the security controls that are intended to prevent an incident from occurring, e.g., by locking out unauthorized

intruders.

Answer C is incorrect. Detective controls are intended to identify and characterize an incident in progress, e.g., by sounding the

intruder alarm and alerting the security guards or police.

Answer A is incorrect. Corrective controls are intended to limit the extent of any damage caused by the incident, e.g., by recovering the

organization to normal working status as efficiently as possible.

Answer B is incorrect. There is no such categorization of controls based on time.