Of the following, which is a detective control?
A.
Segregation of duties
B.
Backup procedures
C.
Audit trails
D.
Physical access control
Explanation:
Audit trails capture information, which can be used for detecting
errors or suspicious activities. Therefore, they are considered to be detective
controls. Backup procedures are corrective controls, and segregation of duties and
physical access controls are examples of preventive controls.
Audit trails can be preventive too if proactive security is being practiced to notice irregularities and take corrective action before loss or damage happens.