week 3

K1.3 The role and types of corrective business control techniques in protecting the digital security of an organisation:

 

The Role of Corrective Controls

Corrective controls are reactive security measures. They are used after an incident has occurred to:

• Limit the damage caused

• Restore systems and services back to normal

• Reduce the chance of the same incident happening again

They help an organisation recover quickly and learn from incidents so improvements can be made.

Types of Corrective Control Techniques

Corrective controls can be grouped into physical and administrative techniques.

Physical Corrective Controls

These help reduce damage from physical threats such as fire, smoke, or environmental hazards.

These systems limit physical damage to IT infrastructure, allowing quicker recovery.

Administrative Corrective Controls (Policies and Procedures)

These are planned response actions documented in company policies. They guide staff on what to do after an incident to reduce harm and avoid repetition.

These procedures help ensure safe, consistent, and quick responses.

Create a Fire Response Plan for a Server Room

Scenario:
A small business has just experienced a minor fire in its server room. You’ve been asked to help create a corrective plan to limit damage and prevent recurrence.

Task:
Identify one physical and one administrative corrective control that should be used.
For each control, describe:
    What it does
     How it helps limit damage or recovery time
     How it prevents the issue from happening again

Extension: Create a simple Standard Operating Procedure (SOP) for how staff should respond when a fire is detected in the server room.

Group Presentation - What an I Study Guide

Scenario: 
Working in small groups create a presentation that can be used as a study guide on one of the following control techniques: 
       Preventative. 
       Detective. 
       Corrective. 
       Deterrent. 
       Directive. 
       Compensating. 

The presentation should consider: 
        The role it plays in the protection of digital security. 

Last Updated
2025-07-11 13:22:23