The correct answer is "Logical controls". The other answers are different categories of controls where preventive controls attempt to eliminate or reduce vulnerabilities before an attack occurs; detective controls attempt to
determine that an attack is taking place or has taken place; and corrective controls involve taking action to restore the system to normal operation after a successful attack.

Section: Security Operations

A business impact analysis (BIA) measures the effect of resource
loss and escalating losses over time in order to provide the entity
with reliable data upon which to base decisions on hazard
mitigation and continuity planning. A BIA is performed as one step
during the creation of a Business Continuity Plan (BCP). A common
five-step approach to a BCP could consist of:
BCP project scope creation
Business impact assessment
Recovery strategy development
Recovery plan development
Implementation, testing, and maintenance.
Answer a is a definition of a disaster/emergency management
program. Answer c describes a mutual aid agreement. Answer d is
the definition of a recovery program. Source: NFPA 1600 Standard
on Disaster/Emergency Management and Business Continuity,
National Fire Protection Association, 2000 edition and Handbook of
Information Security Management, by Micki Krause and Harold F.
Tipton, Auerback, 1999 edition.