Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Invoking a business continuity plan (BCP) demonstrates a corrective control. While BCPs also incorporate preventative measures, their primary function is to address disruptions after they occur and restore normal operations, making them corrective in nature
Corrective controls are implemented to mitigate the effects of an identified problem or incident. When a disruptive event occurs, such as a natural disaster or a cyberattack, invoking a BCP is a corrective action aimed at restoring critical business functions and minimizing the impact on operations. Therefore, invoking a BCP is a form of corrective control.
Corrective Controls Corrective controls, as their name suggests, are designed to minimize the impact of a threat event once it has occurred, and help in restoring, or correcting, a business to normal operations. Examples of corrective controls include the following: • Business continuity planning • Disaster recovery planning • Incident response planning • Backup procedures