Part of the DJames Network / DJames617
Explore the Network
DJames617Personal, professional, creative, and educational hubNerdDualCyber operations, intelligence, resources, and public toolsHDJamesAuthenticated application lab and proving ground
DJames617 The DoWell Nerd

SSCP Comparison

Preventive vs Detective vs Corrective Controls

Do not call a monitoring control preventive unless it actually blocks the action.

Back to ComparisonsPractice SSCP

Comparison Table

Preventive vs Detective vs Corrective Controls
OptionPrimary differenceBest use
PreventiveStops or blocksMFA, firewall deny rule, allowlisting
DetectiveFinds or alertsSIEM alert, IDS, audit review
CorrectiveRestores or fixesBackup restore, patch, account disablement

Exam clue: Do not call a monitoring control preventive unless it actually blocks the action.

How To Use It

Read the scenario for the required outcome. If the requirement is prevention, do not stop at detection. If the requirement is accountability, do not stop at authentication. If the requirement is recovery, distinguish data loss from service downtime.

Arcade Practice

Practice Adaptive SSCP Questions