Which term refers to the organization’s response to control an incident?

The term that refers to the organization’s response to control an incident is Incident Response. This process involves a structured approach to handling and managing the aftermath of a security breach or cyberattack. The goal of Incident Response is to effectively manage the situation, mitigate damage, and reduce recovery time and costs. It includes preparation, detection, analysis, containment, eradication, and post-incident activities, ensuring that an organization is ready to address incidents promptly and efficiently.

In contrast, Disaster Recovery focuses on the restoration of IT systems and operations after a disruption, emphasizing the technical recovery aspect more than the immediate response to the incident. Business Impact Analysis is a process for identifying the effects of disruptions on business functions, and it informs the organization's recovery strategies but does not deal directly with incident management. Recovery Point Objective defines the maximum acceptable amount of data loss measured in time, but it is related to data backup and recovery, not the incident response itself. Thus, the choice of Incident Response as the correct answer is rooted in its direct relevance to managing and controlling incidents effectively.