D is corrent. The requirement is to identify the preventive control. A preventive control is designed to prevent a misstatement from occurring. Access control software prevents unauthorized individuals from gaining access to a system or application and therefore prevents unauthorized transactions or changes in data.
A is incorrect because contingency planning involves developing plans in the event of system failure.
B is incorrect because a hash total is designed to detect errors.
C is incorrect because an echo check is designed to detect errors in transmitted data.
| 
