Skip to content

Detective Control

What is Detective Control?

A security control designed to identify and alert on security events, policy violations, or anomalous activities after they have occurred.

Information Security

Frameworks that govern detective control

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on detective control

Requirements naming detective control across 3 standards, quoted from the control text.

FFIEC Cybersecurity Assessment Tool (CAT)2 controls

Logging, monitoring, anomaly detection, and EDR with documented coverage and tuning.

FFIEC-CAT-CC-3 · Cybersecurity Controls - Detective Controls →
ASEAN Data Management Framework1 control

Implement preventive and detective controls commensurate with the potential impact of data being compromised, establishing risk tolerance and selecting controls to bring risk within the risk appetite.

ADMF-5.1 · Implement risk-based protection controls →
IRM Enterprise Risk Management Framework (Institute of Risk Management)1 control

The IRM Risk Management Process is a 5-stage continuous cycle aligned closely with ISO 31000:2018 + COSO ERM 2017. (1) Risk Identification: systematic identification of risks through workshops + interviews + SWOT/PESTLE analysis + scenario analysis + bow-tie a...

IRM-Process-Identification-Analysis-Evaluation-Treatment-Monitoring-Review-ISO31000-Aligned · IRM Risk Management Process - 5-Stage Cycle + Identification + Analysis (Inherent/Residual) + Evaluation + Treatment (4Ts Tolerate/Treat/Transfer/Terminate) + Monitoring + Review + Communication + Risk Register →

Questions people ask about detective control

What is Detective Control?
A security control designed to identify and alert on security events, policy violations, or anomalous activities after they have occurred.
Why is Detective Control important for compliance?
Detective Control is a key concept in Information Security. Understanding detective control helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Detective Control?
Detective Control appears in the requirement text of FFIEC Cybersecurity Assessment Tool (CAT), ASEAN Data Management Framework, IRM Enterprise Risk Management Framework (Institute of Risk Management). Across these standards we have identified 4 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Detective Control?
Explore our compliance framework pages to see how detective control applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Detective Control applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.