An organization has a new regulatory requirement to implement corrective controls on a financial system. Which of the following is the most likely reason for the new requirement?

Corrective controls aim to reduce the impact of an incident or error after it has occurred. In a financial system, a key concern is data integrity. If an error is introduced into the system, a corrective control would identify and fix that error before it propagates to other interconnected systems, preventing widespread inaccuracies and potential financial losses. "To defend against insider threats altering banking details" and "To prevent unauthorized changes to financial data" describe preventative controls, which aim to stop an incident from happening in the first place. "To allow for business insurance to be purchased" is a business decision, not a direct function of a corrective control, though robust controls might influence insurance rates.