A
preventive control stops security incidents before they occur — firewalls, MFA, locks, encryption, access controls, security awareness training.
Control types: Preventive (stops), Detective (identifies), Corrective (fixes), Deterrent (discourages), Recovery (restores), Compensating (alternative). Preventive = most valuable. Detective = most common. Know all types.