---
title: "Preventative Control — AP Cybersecurity Definition & Guide"
description: "A preventative control stops an attack before it happens, like locks and fences. Learn how it shows up in AP Cybersecurity Unit 2 and how it differs from detective and corrective controls."
canonical: "https://fiveable.me/ap-cybersecurity/key-terms/preventative-control"
type: "key-term"
subject: "AP Cybersecurity"
unit: "Unit 2"
---

# Preventative Control — AP Cybersecurity Definition & Guide

## Definition

In AP Cybersecurity, a preventative control is a security measure designed to stop an attack before it happens, such as locks, fences, gates, or bollards that block an adversary from accessing systems or physical spaces.

## What It Is

A **preventative control** is any security measure that blocks an attack before it can start. The whole point is to keep the bad thing from happening in the first place, not to catch it after the fact.

In [Unit 2](/ap-cybersecurity/unit-2 "fv-autolink"), this shows up most clearly in physical security. When a cyber defender looks at a [vulnerability](/ap-cybersecurity/key-terms/vulnerability "fv-autolink"), they ask three questions: how do I *prevent*, *detect*, or *correct* an attack (EK 2.3.B.1)? Preventative controls answer the first one. Think fencing, gates, and bollards that deter someone from getting near a building (EK 2.3.B.2), or locks on doors, server cabinets, and computers that stop devices from being accessed or stolen (EK 2.3.B.3). Each of these works ahead of time to shut the door, sometimes literally, before an adversary gets in.

## Why It Matters

This term lives in **Unit 2: Securing Spaces**, specifically [topic 2.3](/ap-cybersecurity/unit-2/protecting-physical-spaces/study-guide/PhHFFwPlXGtEWL781jEc "fv-autolink") Protecting Physical Spaces. It directly supports learning objective **[AP Cybersecurity](/ap-cybersecurity "fv-autolink") 2.3.B**, which asks you to determine mitigation strategies for risks from physical vulnerabilities. The big idea baked into EK 2.3.B.1 is the prevent-detect-correct framework, and preventative controls are the "prevent" leg of that triad. If you can match a vulnerability to a control that stops the attack early, you're doing exactly what this objective wants.

## Connections

### [Detective Control (Unit 2)](/ap-cybersecurity/key-terms/detective-control)

If a preventative control is the locked door, a [detective control](/ap-cybersecurity/key-terms/detective-control "fv-autolink") is the camera that records who tried to open it. Card readers that log which employee badges access an entry (EK 2.3.B.4) detect activity rather than block it. Same threat, different job in the timeline.

### [Corrective Control (Unit 2)](/ap-cybersecurity/key-terms/corrective-control)

[Corrective controls](/ap-cybersecurity/unit-2/cyber-foundations/study-guide/0oS8jJyX7iolYntwz5Eh "fv-autolink") clean up after an attack already landed. Preventative, detective, and corrective controls are the full prevent-detect-correct set from EK 2.3.B.1, so knowing one means knowing where the other two fit on the before-during-after line.

### [Physical Control (Unit 2)](/ap-cybersecurity/key-terms/physical-control)

Most of the preventative controls in topic 2.3 are physical controls: fences, gates, bollards, and locks. "Physical" describes what the control is made of; "preventative" describes what it does. A single fence can be both.

### [Managerial Control (Unit 2)](/ap-cybersecurity/key-terms/managerial-control)

Managerial controls like a [workstation security policy](/ap-cybersecurity/key-terms/workstation-security-policy "fv-autolink") or employee awareness training (EK 2.3.A.1, EK 2.3.A.2) are often preventative too. Teaching staff not to badge strangers into restricted areas prevents an attack the same way a lock does, just through people instead of hardware.

## On the AP Exam

Expect to apply this idea rather than just define it. A multiple-choice stem might describe a physical vulnerability and ask which control best addresses it, where you pick the option that stops the attack before it starts. On free-response items tied to AP Cybersecurity 2.3.B, you may be asked to recommend a mitigation strategy and justify it, so be ready to explain *why* a lock or a fence is preventative rather than detective. The move you're being tested on is matching a control to a vulnerability and correctly classifying it as prevent, detect, or correct.

## preventative control vs detective control

A preventative control stops an attack from happening; a detective control notices it happening or after it happened. A lock on a server cabinet is preventative because it blocks access. A card reader that logs badge use is detective because it records the activity instead of stopping it (EK 2.3.B.4). Ask yourself: does this control block the attack, or just reveal it?

## Key Takeaways

- A preventative control stops an attack before it can start, which is the "prevent" leg of the prevent-detect-correct framework in EK 2.3.B.1.
- Classic physical examples are fencing, gates, and bollards (EK 2.3.B.2) plus locks on doors, server cabinets, and computers (EK 2.3.B.3).
- Preventative is about timing and purpose; physical, managerial, and technical describe what kind of control it is, so a control can be both at once.
- Card readers that log badge access are detective, not preventative, because they record activity instead of blocking it.
- On AP Cybersecurity 2.3.B questions, your job is to match a vulnerability to the right control and correctly label it prevent, detect, or correct.

## FAQs

### What is a preventative control in AP Cybersecurity?

It's a security measure that blocks an attack before it happens, like locks, fences, gates, or bollards. It maps to learning objective AP Cybersecurity 2.3.B and the prevent-detect-correct framework in EK 2.3.B.1.

### Is a lock a preventative or detective control?

A lock is preventative. Locks on doors, server cabinets, and computers prevent devices from being accessed or stolen (EK 2.3.B.3), which means they stop the attack rather than just record it.

### How is a preventative control different from a detective control?

A preventative control blocks an attack from happening, while a detective control notices or records it. A locked cabinet prevents theft; a card reader [logging](/ap-cybersecurity/key-terms/logging "fv-autolink") badge use (EK 2.3.B.4) detects who came through the door.

### Are preventative controls always physical?

No. Many physical controls like fences and locks are preventative, but managerial controls can be too. Employee awareness training that teaches staff not to badge strangers into restricted areas (EK 2.3.A.1) prevents attacks through people, not hardware.

### How do I answer a control question on the AP exam?

Read the vulnerability, then ask whether the control stops, catches, or fixes the attack. If it shuts the door before the adversary acts, it's preventative, which is exactly what AP Cybersecurity 2.3.B wants you to identify.

## Related Study Guides

- [2.3 Protecting Physical Spaces](/ap-cybersecurity/unit-2/protecting-physical-spaces/study-guide/PhHFFwPlXGtEWL781jEc)

## Structured Data

```json
{"@context":"https://schema.org","@graph":[{"@type":"LearningResource","@id":"https://fiveable.me/ap-cybersecurity/key-terms/preventative-control#resource","name":"Preventative Control — AP Cybersecurity Definition & Guide","url":"https://fiveable.me/ap-cybersecurity/key-terms/preventative-control","learningResourceType":"Concept explainer","educationalLevel":"AP® / High School","about":{"@id":"https://fiveable.me/ap-cybersecurity/key-terms/preventative-control#term"},"audience":{"@type":"EducationalAudience","educationalRole":"student"},"dateModified":"2026-06-15T18:59:31.238Z","isPartOf":{"@type":"Collection","name":"AP Cybersecurity Key Terms","url":"https://fiveable.me/ap-cybersecurity/key-terms"},"publisher":{"@type":"Organization","name":"Fiveable","url":"https://fiveable.me"}},{"@type":"DefinedTerm","@id":"https://fiveable.me/ap-cybersecurity/key-terms/preventative-control#term","name":"preventative control","description":"In AP Cybersecurity, a preventative control is a security measure designed to stop an attack before it happens, such as locks, fences, gates, or bollards that block an adversary from accessing systems or physical spaces.","url":"https://fiveable.me/ap-cybersecurity/key-terms/preventative-control","inDefinedTermSet":{"@type":"DefinedTermSet","name":"AP Cybersecurity Key Terms","url":"https://fiveable.me/ap-cybersecurity/key-terms"},"educationalAlignment":[{"@type":"AlignmentObject","alignmentType":"educationalSubject","educationalFramework":"AP® Course and Exam Description","targetName":"AP Cybersecurity Unit 2, Topic 2.3, LO 2.3.A"},{"@type":"AlignmentObject","alignmentType":"educationalSubject","educationalFramework":"AP® Course and Exam Description","targetName":"AP Cybersecurity Unit 2, Topic 2.3, LO 2.3.B"}]},{"@type":"FAQPage","mainEntity":[{"@type":"Question","name":"What is a preventative control in AP Cybersecurity?","acceptedAnswer":{"@type":"Answer","text":"It's a security measure that blocks an attack before it happens, like locks, fences, gates, or bollards. It maps to learning objective AP Cybersecurity 2.3.B and the prevent-detect-correct framework in EK 2.3.B.1."}},{"@type":"Question","name":"Is a lock a preventative or detective control?","acceptedAnswer":{"@type":"Answer","text":"A lock is preventative. Locks on doors, server cabinets, and computers prevent devices from being accessed or stolen (EK 2.3.B.3), which means they stop the attack rather than just record it."}},{"@type":"Question","name":"How is a preventative control different from a detective control?","acceptedAnswer":{"@type":"Answer","text":"A preventative control blocks an attack from happening, while a detective control notices or records it. A locked cabinet prevents theft; a card reader [logging](/ap-cybersecurity/key-terms/logging \"fv-autolink\") badge use (EK 2.3.B.4) detects who came through the door."}},{"@type":"Question","name":"Are preventative controls always physical?","acceptedAnswer":{"@type":"Answer","text":"No. Many physical controls like fences and locks are preventative, but managerial controls can be too. Employee awareness training that teaches staff not to badge strangers into restricted areas (EK 2.3.A.1) prevents attacks through people, not hardware."}},{"@type":"Question","name":"How do I answer a control question on the AP exam?","acceptedAnswer":{"@type":"Answer","text":"Read the vulnerability, then ask whether the control stops, catches, or fixes the attack. If it shuts the door before the adversary acts, it's preventative, which is exactly what AP Cybersecurity 2.3.B wants you to identify."}}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"AP Cybersecurity","item":"https://fiveable.me/ap-cybersecurity"},{"@type":"ListItem","position":2,"name":"Key Terms","item":"https://fiveable.me/ap-cybersecurity/key-terms"},{"@type":"ListItem","position":3,"name":"Unit 2","item":"https://fiveable.me/ap-cybersecurity/unit-2"},{"@type":"ListItem","position":4,"name":"preventative control"}]}]}
```