Exam CRISC topic 1 question 510 discussion

Pero no hay ninguna explicación

C. Periodic access review Detective controls are designed to identify and respond to unwanted events or circumstances. A periodic access review, which checks whether the current set of access permissions is appropriate and whether unauthorized changes have occurred, is a detective control because it discovers inappropriate or outdated access levels after they've been set.

A is a preventative measure, as is B. D is a corrective measure I believe. Went with C

Detective controls: These controls are designed to detect variation outside control limits. They assess whether various controls (for example, directive or preventive) have achieved their objectives. These controls primarily focus on detection of errors, omissions, and irregularities. In addition, they also highlight system quality, controls, and security issues that need management intervention. D - rerun procedures is considered a corrective / recovery control.

Agree C.

should be C

Audit trails, intrusion detection systems (IDSs), and checksums are examples of detective controls. C should be the answer. NOT D - how can rerun procedures be a detective control.?.

echo C

A detective control is a type of internal control that seeks to uncover problems in a company's processes once they have occurred. Examples of detective controls include physical inventory checks, reviews of account reports and reconciliations, as well as assessments of current controls.

Rerun procedures is a Corrective control