Certified in Risk and Information Systems Control (CRISC) — Question 15

Which of the following control detects problem before it can occur?

Answer options

• A. Deterrent control
• B. Detective control
• C. Compensation control
• D. Preventative control

Correct answer: D

Explanation

The correct answer is D, Preventative control, as it is specifically designed to prevent issues from occurring in the first place. Options A (Deterrent control) and B (Detective control) are focused on discouraging actions or identifying problems after they occur, respectively, while C (Compensation control) refers to measures taken to offset a risk rather than preventing it.