Which two control types does IR 8286 name alongside preventative, detective and corrective? Choose two.

Answer: C. Deterrent
A. Compensating

IR 8286 sorts control examples into five kinds: preventative, deterrent, detective, corrective and compensating — the last standing in where some other control is weak.

Source: NIST IR 8286 (NIST) — Sec. 3.5.1 Applying Security Controls