Corrective Control
What is Corrective Control?
A security control designed to restore systems and processes to their expected state after a security incident or policy violation has been detected.
Frameworks that govern corrective control
What the standards actually require on corrective control
Requirements naming corrective control across 3 standards, quoted from the control text.
Management mitigates risk with preventive, detective and corrective controls of administrative, technical and physical nature arranged in layers at different points of the business process and the IT system, so that one control compensates for the weakness or...
ffiec-it-examination-handbook::IS-II.C.3 · II.C.3 Control Types (Information Security) →Input: assessment results. Action: formulate the plan. Trigger: the need to treat risks. Output: the risk treatment plan. Plans treat sets of the prioritised risks so they meet the acceptance criteria of 6.4.2, either as a project plan for implementing control...
iso-27005-2022::8.6.1 · Formulation of the risk treatment plan →In evaluating controls the bank factors in Board oversight, policies, processes, cyber risk architecture, experienced and qualified resources, training and culture, threat intelligence gathering and analysis against the banking sector, information sharing with...
rbi-cybersecurity-framework-for-banks::46 · Para 46: control evaluation factors including threat intelligence and information sharing →Questions people ask about corrective control
What is Corrective Control?
Why is Corrective Control important for compliance?
Which compliance frameworks address Corrective Control?
Where can I learn more about Corrective Control?
See how Corrective Control applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.