Differentiate between preventive and detective security controls with examples.

Differentiate between preventive and detective security controls with examples.

• A. Preventive controls stop incidents; detective controls identify incidents; the two types complement each other.
• B. Preventive controls stop incidents only
• C. Detective controls identify incidents only
• D. Both are the same

Answer: (A)

The idea here is that security controls serve two complementary roles: stopping incidents before they happen and revealing incidents so you can respond quickly. Preventive controls are designed to block unauthorized access or actions—think strong authentication, access control lists, secure configurations, regular patching, physical locks, and security policies and training. These reduce the chance that an incident occurs in the first place. Detective controls, on the other hand, monitor systems and environments to identify when an incident has occurred or is in progress—examples include security monitoring dashboards, intrusion detection systems, surveillance cameras, audit logs, and anomaly detection. They enable timely alerts and fast containment and recovery. The strongest security posture uses both together. Prevention lowers the likelihood of events, while detection ensures you know when something slips through so you can respond promptly and limit damage. Some controls can play both roles, such as comprehensive logging and monitoring, which can deter certain actions and also provide evidence when they occur.

The idea here is that security controls serve two complementary roles: stopping incidents before they happen and revealing incidents so you can respond quickly. Preventive controls are designed to block unauthorized access or actions—think strong authentication, access control lists, secure configurations, regular patching, physical locks, and security policies and training. These reduce the chance that an incident occurs in the first place.

Detective controls, on the other hand, monitor systems and environments to identify when an incident has occurred or is in progress—examples include security monitoring dashboards, intrusion detection systems, surveillance cameras, audit logs, and anomaly detection. They enable timely alerts and fast containment and recovery.

The strongest security posture uses both together. Prevention lowers the likelihood of events, while detection ensures you know when something slips through so you can respond promptly and limit damage. Some controls can play both roles, such as comprehensive logging and monitoring, which can deter certain actions and also provide evidence when they occur.