OCEG Exam GRCA Topic 2 Question 11 Discussion

Proactive controls are those measures implemented to prevent undesirable events before they occur. Promoting controls are designed to encourage desired behaviors and outcomes, such as compliance with policies and procedures. Preventive controls are aimed at stopping undesirable events or actions before they happen, such as implementing security measures to prevent unauthorized access. Both types of controls are essential for effective risk management and ensuring the security and integrity of an organization's processes and systems. Reference:

COSO Internal Control -- Integrated Framework

ISO/IEC 27002:2013 - Information technology - Security techniques - Code of practice for information security controls