Exam CISM topic 1 question 975 discussion

it is detective. It cannot be preventative

The key word in the question is "Identify". Identify = Detect. Therefore the correct answer is C. Detective controls

Preventive - Policy is designed to prevent first. Detection just tells you the policy was violated.

C. Detective controls. Detective controls are designed to detect and identify deviations from established security policies and procedures. They help organizations monitor and identify potential security incidents or policy violations by actively monitoring and analyzing system logs, conducting security audits, and performing regular security assessments. Detective controls can include activities such as security monitoring, intrusion detection systems, log analysis, and security incident response.

C. Detective controls