Corrective Controls

Security controls that act after an incident to limit damage and restore normal operations, such as restoring from backups, applying patches after exploitation, or removing malware. They respond to and recover from events rather than preventing them.