Private and Industrial Security Exam 1 Practice

Detecting incidents after they occur is the role of detective controls. These controls monitor systems and activities to reveal that something happened and often trigger alerts so responders can investigate. Examples include security cameras, log analysis, and intrusion-detection systems. Because the question is asking for the type designed to uncover incidents after they occur, detective controls are the best fit since their primary function is to identify events after the fact. In contrast, preventive controls aim to stop events before they happen (such as access controls and firewalls); compensatory controls provide substitute safeguards when a primary control isn’t feasible; and corrective controls come into play after an incident to restore operations and reduce the impact.