Which action corresponds to a Preventative subcategory in Compliance Manager?

The action of encrypting data at rest corresponds to a Preventative subcategory in Compliance Manager because it is a proactive measure designed to protect sensitive information from unauthorized access. By employing encryption, organizations ensure that even if data is intercepted or accessed without permission, it remains unreadable and secure without the appropriate encryption keys. This prevention tactic is essential in a compliance context where safeguarding data integrity and protecting against data breaches are paramount.

Other actions, such as performing a system access audit or making configuration changes in response to a security incident, are more reactive. Audits may identify vulnerabilities or weaknesses after the fact, and making configuration changes usually occurs in response to an identified security threat or incident rather than proactively preventing one. Thus, these options do not align with the concept of a preventative measure in the same way that data encryption does.