Enterprise risk & controls · Core

Detective control

Also called: detection control

ELI5

A control designed to identify an error or event after or while it occurs.

Used in conversation

“Add detective control to the risk register with an owner and mitigation.”

Pitch context

You will see “Detective control” in board papers, contracts, policies, risk registers and compliance reports when the discussion reaches enterprise risk & controls.

Why it matters: In enterprise risk & controls, a loose definition can change rights, obligations, approval, disclosure or enforceability.

Caution

Meaning, enforceability and required process vary by jurisdiction and agreement; this definition is not legal advice.

Sources & evidence · 3

Direct term-level sources and supporting source families.