CRISC Certified in Risk and Information Systems Control – Question298

What are the PRIMARY objectives of a control?

A.
Detect, recover, and attack
B. Prevent, respond, and log
C. Prevent, control, and attack
D. Prevent, recover, and detect

Correct Answer: D

Explanation:

Explanation:
Controls are the policies, procedures, practices and guidelines designed to provide appropriate assurance that business objectives are achieved and undesired events are detected, prevented, and corrected. Controls, or countermeasures, will reduce or neutralize threats or vulnerabilities.
Controls have three primary objectives:

  • Prevent
  • Recover
  • Detect

Incorrect Answers: A, B, C: One or more objectives stated in these choices is not correct objective of control.