An organization is repairing the damage after an incident.

A corrective control is a type of security control that is designed to mitigate the damage caused by a security incident or to restore the normal operations after an incident. A corrective control can include actions such as restoring from backups, applying patches, isolating infected systems, or implementing new policies and procedures. A corrective control is different from a preventive control, which aims to stop an incident from happening, or a detective control, which aims to identify and record an incident. References:

https://www.professormesser.com/security-plus/sy0-601/sy0-601-video/security-controls-3/

https://www.oreilly.com/library/view/comptia-security-all-in-one/9781260464016/ch31.xhtml

https://www.professormesser.com/security-plus/sy0-501/security-controls-2/