Preventive, Detective and Corrective Controls
Control Categories Based on Purpose
Information system controls are also categorized according to their purpose. Some prevent problems before they occur, others detect incidents, while corrective controls restore systems after incidents.
Note
An effective control environment includes preventive, detective, and corrective controls working together.
Summary
Different control categories address different stages of risk management.