A
detective control identifies security events after they occur — IDS, security cameras, audit logs, integrity monitoring. Detects but doesn't prevent.
Control categories: Preventive (stops attacks), Detective (identifies attacks), Corrective (fixes damage), Deterrent (discourages attacks). A camera is deterrent AND detective. IPS is preventive AND detective.