A company is planning to set up a SIEM system and assign an analyst to review the logs on a weekly basis. Which of the following types of controls is the company setting up?

The company is setting up a detective control. A Security Information and Event Management (SIEM) system, combined with weekly analyst review of logs, is designed to identify and alert on security incidents after they have occurred. This allows the organization to detect breaches or policy violations. Preventive controls aim to stop incidents from happening in the first place (e.g., firewalls, access controls). Corrective controls are implemented after an incident is detected to minimize its impact or restore systems (e.g., incident response plans, backups). Deterrent controls discourage potential attackers (e.g., security cameras, warning signs), but don't directly detect or prevent a digital attack.