How would you classify risk mitigation and risk reduction controls?
A.
Preventive, corrective, and administrative
B.
Detective and corrective
C.
Preventive, corrective, or detective
D.
Administrative, operational, or logical
Explanation:
Controls can be preventive, detective, or corrective.