Which statement below is an incorrect description of a security control?
1) Corrective controls reduce the likelihood of a deliberate attack
2) Corrective controls reduce the effect of an attack
3) Controls are the countermeasures for vulnerabilities
4) Detective controls discover attacks and trigger preventive or corrective controls