Control Classifications

Control classification sorts controls into types of actions taken.

1. Preventive control - An internal control that is used to prevent undesirable events, errors, and other occurrences that an organization has determined could have a negative material effect on a process or end product.
2. Detective control - A control that is used to identify events (undesirable or desired), errors, and other occurrences that an enterprise has determined to have a material effect on a process or end product.
3. Corrective control - These controls are designed to correct errors, omissions, and unauthorized uses and intrusions once they are detected.

To find out more about Common Control Categories and Types, check out our FAQ Control Impact Zones and Control Types.