An organization implemented a process that compares the settings currently configured on systems against
secure configuration guidelines in order to identify any gaps. Which of the following control types has the
organization implemented?


A. Compensating
B. Corrective
C. Preventive
D. Detective