In the IACM, what are the two types of Proactive Actions & Controls?

In the IACM, what are the two types of Proactive Actions & Controls?
A . Reactive Actions & Controls and Passive Actions & Controls
B . Prevent/Deter Actions & Controls and Promote/Enable Actions & Controls
C . Centralized Actions & Controls and Decentralized Actions & Controls
D . Quantitative Actions & Controls and Qualitative Actions & Controls

View Answer

Answer: B

Explanation:

The two types of Proactive Actions & Controls in the IACM are:

Prevent/Deter Actions & Controls:

Focus on avoiding unfavorable events and reducing risks before they occur. Example: Implementing security protocols to deter cyberattacks.

Promote/Enable Actions & Controls:

Facilitate the realization of opportunities and favorable outcomes. Example: Employee training programs to improve productivity.

Why Other Options Are Incorrect:

A: Reactive and passive actions are not proactive by definition.

C: Centralization/decentralization pertains to organizational structure.

D: Quantitative and qualitative are methods, not categories of controls.

Reference: OCEG IACM Framework: Details types of proactive controls for risk and opportunity management.