Security Guard's Post-Incident Review Control

C.

The control that allows a security guard to perform a post-incident review is a corrective control.

Corrective controls are used to address and mitigate the effects of an incident or a security breach that has already occurred. They are reactive in nature and aim to minimize the damage caused by an incident or to restore normal operations as quickly as possible.

In the case of a security guard performing a post-incident review, this would involve reviewing the details of an incident that has already occurred in order to identify the cause, assess the damage, and determine what steps can be taken to prevent similar incidents from happening in the future. This is an example of a corrective control because it is aimed at addressing the aftermath of an incident that has already taken place.

Detective controls, on the other hand, are used to identify security breaches or incidents as they occur. They are aimed at detecting and alerting security personnel to suspicious activity or security breaches in real-time. Examples of detective controls include intrusion detection systems, security cameras, and log analysis tools.

Preventive controls are designed to stop incidents from happening in the first place. They are proactive in nature and aim to prevent security breaches before they occur. Examples of preventive controls include access controls, firewalls, and security awareness training.

Deterrent controls are used to discourage potential attackers or intruders from attempting to breach security controls. They are designed to make the cost of an attack or breach higher than the potential gain for the attacker. Examples of deterrent controls include security signs, security patrols, and security cameras.

In summary, the control that allows a security guard to perform a post-incident review is a corrective control, which is used to address the effects of an incident that has already occurred.