A preventive control is a security measure designed to stop an incident or attack from occurring in the first place. Firewalls and access controls are examples of preventive controls that proactively protect systems and data by blocking unauthorized access or malicious traffic before it can cause harm. In contrast, detective controls identify incidents that have already occurred, corrective controls limit damage after an incident, and compensating controls serve as substitutes for primary controls.