A mitigating technique designed to recognize an occurrence or change in circumstances that may affect operations (a physical, cyber, or combination thereof) and alert management when events occur. Detective controls may be designed to find problems, errors, or fraud in an organization’s processes and transactions. Adapted from: FFIEC IT Examination Handbook, Information Security. 2021. https://ithandbook.ffiec.gov/glossary.aspx
