Facial recognition software is an example of a preventive control, not a deterrent control. Preventive controls are designed to stop an incident from occurring by ensuring only authorized individuals gain access to a facility. In contrast, deterrent controls are aimed at discouraging potential attackers, such as displaying warning signs. Therefore, the use of facial recognition is to prevent unauthorized access rather than to simply deter it.