Preventive Controls

Controls designed to deter or stop errors, irregularities, or adverse events from occurring. Preventive controls act before a risk materializes and help reduce the likelihood of negative outcomes. Examples include authorization requirements, physical access restrictions, segregation of duties, and input validation routines. Within RBPM, preventive controls form a first line of defense in the risk management framework. They help maintain risk exposure within appetite boundaries by addressing potential risk sources before they can cause harm.