After a recent ransomware attack on a company's system, an administrator reviewed the log files. Which of the following control types did the administrator use?