Control (preventive, detective, corrective)
A safeguard that reduces risk. Preventive controls stop an incident before it happens (a firewall), detective controls notice it happening (a SIEM alert), and corrective controls fix things afterward (restoring from backup).