What is an example of a Responsive control?

Blocking an attacker's IP address after a breach is an example of a responsive control because it involves taking action after an incident has occurred to mitigate further damage or prevent the attacker from gaining access again. Responsive controls are designed to reduce the impact of an incident and restore security after a vulnerability has been exploited or a breach has been detected. They focus on reacting to events and managing the consequences of incidents that have already taken place.

In this context, the other options represent different types of controls. Conducting regular training sessions on security is proactive, aimed at increasing awareness and preventing breaches before they happen. Implementing firewall rules to prevent access also falls under preventive controls, established to block threats before they penetrate the system. Providing secure access to all personnel is a measure of ongoing management and safeguarding rather than a response to a specific incident. Therefore, the action of blocking an attacker's IP address is distinctly categorized as a responsive measure in the overall risk management framework.