City council issues a binding directive that all departments must encrypt laptops. Which control type best describes that mandate?
Select an answer to reveal the explanation.
Short Explanation
A council directive is the boss saying 'you will do this' — it tells people what behavior is required. That is a directive control type. The disk encryption software that actually scrambles the drive is a separate technical/preventive story.
Full Explanation
Directive controls mandate or prescribe required actions and behaviors, typically through policies, standards, or authoritative instructions. A binding council directive to encrypt laptops is directive because it tells departments what they must do. Encryption technology itself may be preventive/technical once implemented, but the mandate is classified as directive. Detective, compensating, and corrective types address discovery, alternate mitigation, and post-incident repair respectively—not the prescription of required behavior.