CISA Certified Information Systems Auditor – Question1242 An IT organization’s incident response plan is which type of control?A. PreventiveB. CorrectiveC. DetectiveD. Directive Show Answer Hide Answer Correct Answer: B