SY0-701: CompTIA Security+

Corrective controls remediate errors or incidents and limit their downstream impact. Ensuring errors do not propagate to other systems is therefore a corrective-control objective; preventing unauthorized changes is a preventive-control objective, and purchasing insurance is risk transfer.