BTpreventive ,corrective and detective controls

I think corrective control can include restoring data and capabilities to levels before unwanted event or events compromised said data and or capabilities. Hope this helps.

Welcome to the Opentuition forums. In other words the backups are designed to enable correction to errors, omissions or mistakes caused by event or events impacting main system which comprise data or capabilities.

But here it is written that we are backing up data and non of the risk has occurred (as u said restoing) and i thought this one was preventive as we are proactively backing up and not corrective as they are placed or performed after any risk has occurred??? Please explain in thoroughly...

I can see your point. It is connected with how these terms are used in practice and how the boundaries between them are defined. To make it easier, I am going to use alternative example. Imagine in past company had paper based record system at its headquarters. A preventive control to protect these would be to have various fire safety controls and systems in place. However, if large fire occurred it would be impossible to restore these records if copies had not been made and stored at other locations (paper would be consumed by fire). Corrective control for this needs prior planning. Despite being done in advance this is considered to be corrective control as it allows correction to be carried out in response to event. In this example, a large fire at headquarters.

OH okey thank you so much for your help :)

You are very welcome.