thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Commonly confused · Security Fundamentals & Crypto

Preventive vs Detective vs Corrective Controls: What's the Difference?

Preventive controls stop an incident before it happens, detective controls identify and alert on an incident while or after it happens, and corrective controls fix the problem and restore systems after an incident.

Preventive Controls

vs

Detective Controls

vs

Corrective Controls

Preventive ControlsDetective ControlsCorrective Controls
TimingBeforeDuring or afterAfter
GoalStop the eventDiscover the eventLimit damage and restore
Technical examplesFirewall rules, MFA, encryptionIDS, SIEM alerts, log reviewRestoring from backup, patching, reimaging
Physical examplesLocks, fences, mantrapsCCTV review, motion sensorsRepairing a broken door
Administrative examplesSecurity policies, background checksAudits, job rotation, mandatory vacationIncident response procedures
Remember it

Prevent stops it, detect spots it, correct fixes it.

Exam tip

CCTV is a classic trick: it is detective (and a deterrent if visible), not preventive. Mandatory vacation and job rotation are detective controls aimed at fraud.

Tested on

More Security Fundamentals & Crypto look-alikes