The Primary Objectives of Control

D.

Controls are the policies, procedures, practices and guidelines designed to provide appropriate assurance that business objectives are achieved and undesired events are detected, prevented, and corrected.

Controls, or countermeasures, will reduce or neutralize threats or vulnerabilities.

Controls have three primary objectives: -> Prevent -> Recover -> Detect Incorrect Answers: A, B, C: One or more objectives stated in these choices is not correct objective of control.

The primary objectives of a control are to prevent, detect, and respond to risks or threats.

A. Option A, "detect, recover, and attack" is not an appropriate answer as it suggests that a control's objective is to attack, which is not a desirable or ethical objective for a control.

B. Option B, "prevent, respond, and log" has some aspects that are correct. Preventing risks is one of the primary objectives of a control, and logging activities helps in responding to threats. However, responding is not a primary objective; rather, it is a secondary objective that supports the primary objectives.

C. Option C, "prevent, control, and attack," again includes the term "attack," which is not a desirable objective for a control. Moreover, controlling risks is not a primary objective but a means to achieve the primary objective of preventing risks.

D. Option D, "prevent, recover, and detect," is the correct answer as it includes the primary objectives of a control. The first objective is to prevent risks from occurring. The second objective is to detect and identify risks that may have occurred. The third objective is to recover from any damage caused by the risk and to restore the system to its normal state.

In summary, the primary objectives of a control are to prevent risks, detect and identify risks, and recover from any damage caused by the risk.