The two types of Proactive Actions & Controls in the IACM are:
Prevent/Deter Actions & Controls:
Focus on avoiding unfavorable events and reducing risks before they occur.
Example: Implementing security protocols to deter cyberattacks.
Promote/Enable Actions & Controls:
Facilitate the realization of opportunities and favorable outcomes.
Example: Employee training programs to improve productivity.
Why Other Options Are Incorrect:
A: Reactive and passive actions are not proactive by definition.
C: Centralization/decentralization pertains to organizational structure.
D: Quantitative and qualitative are methods, not categories of controls.
References:
OCEG IACM Framework: Details types of proactive controls for risk and opportunity management.