Explanation

Let's analyze each control type and the corresponding measures:

Control Types:

• Preventive Controls: Designed to prevent incidents from occurring (proactive)
• Detective Controls: Designed to identify incidents that have occurred (monitoring)
• Corrective Controls: Designed to restore systems after an incident has occurred (recovery)
• Directive Controls: Policies and procedures that guide employee behavior and establish requirements

Analysis of Each Measure:

1. Multi-factor authentication (MFA): This is a Preventive Control - it prevents unauthorized access by requiring multiple forms of verification before granting system access.

2. Intrusion detection systems (IDS): This is a Detective Control - it monitors network traffic to detect potential security breaches or malicious activities that have already occurred.

3. Incident response team: This is a Corrective Control - it responds to and restores systems after a security breach has occurred.

4. Cybersecurity policy with mandatory training: This is a Directive Control - it establishes mandatory requirements and guides employee behavior through policies and training.

Correct Classification:

• Preventive: MFA
• Detective: IDS
• Corrective: Incident response team
• Directive: Cybersecurity policy

Therefore, Option B correctly identifies all four control types with their corresponding measures.