Free CompTIA Security+ SY0-701 Practice Question

Corrective controls are put in place to minimize the damage and impact of a security incident after it has occurred. These controls are reactive in nature and are activated once an incident is detected. Examples of corrective controls include incident response plans and backup systems that can restore data and systems after an incident. Preventive controls, on the other hand, aim to stop incidents from occurring in the first place. Detective controls are used to identify incidents, while compensating controls are used as a substitute for primary controls.