Choose which of the following has an incorrect mapping.

A.
Corrective – Mitigate damage and restore controls

B.
Preventive – Avoid security incident

C.
Detective – Identify security incident

D.
Recovery – Restore conditions to unusual

E.
Compensating – Alternative control

F.
Deterrent – Discourage incident

Explanation:
Preventive – A control type that attempts to avoid a security incident from taking place.
Detective – A control type that identifies a security incident after it takes place.
Corrective – A control type that reduces damages or remedies the situation and restore controls.
Compensating – A control type that provides an alternate for another control type.
Deterrent – A control type that discourages security incident attempts.
Recovery – A control type that brings the system or environment back to a normal working environment.