ISC Exam Questions

which category of security control?

Business continuity and disaster recovery fall under which category of security control?

A.
Preventive

B.
Detective

C.
Corrective

D.
Compensating

Explanation:
Business continuity and disaster recovery do not contribute directly
to organizational security, but they can serve to compensate for security disasters
by reducing the time it takes to respond to a security incident that interrupts
business productivity.