Preventive controls stop errors or fraud before they occur through authorization requirements, segregation of duties, and access restrictions. Detective controls identify problems after occurrence through monitoring, reconciliations, and reviews. Preventive controls prevent issues, detective controls find existing problems.
