Certified in Risk and Information Systems Control (CRISC) — Question 991

A poster has been displayed in a data center that reads, “Anyone caught taking photographs in the data center may be subject to disciplinary action.” Which of the following control types has been implemented?

Answer options

• A. Preventative
• B. Corrective
• C. Detective
• D. Deterrent

Correct answer: D

Explanation

The correct answer is D, as the sign serves to discourage individuals from taking photographs by warning of potential consequences. Options A, B, and C represent different types of controls that focus on prevention, correction after an incident, and detection of incidents, respectively, but they do not aim to deter behavior in the same way.