Question

Which type of control is specifically designed to stop a non-compliant action from occurring before it is completed?

Accepted Answer

The type of control specifically designed to stop a non-compliant action before it occurs is called a preventive control. A preventive control acts as a barrier or a filter that blocks unauthorized or incorrect activities at the earliest possible stage, which is before the action is finalized or processed. By implementing these controls, an organization ensures that errors or violations are avoided entirely rather than being identified after the damage has already been done. Common examples include password requirements that prevent unauthorized system access, firewalls that block prohibited network traffic, and segregation of duties where one person cannot complete a sensitive transaction alone. Because these controls operate at the input or initiation phase of a process, they are the most effective way to maintain compliance and security by removing the possibility of a non-compliant event before it can happen.

Home → All Courses → Law and Criminal Justice Courses → Governance, Risk & Compliance (GRC) Certification → Flashcard

Which type of control is specifically designed to stop a non-compliant action from occurring before it is completed?

The type of control specifically designed to stop a non-compliant action before it occurs is called a preventive control. A preventive control acts as a barrier or a filter that blocks unauthorized or incorrect activities at the earliest possible stage, which is before the act....