Which of the following is considered a preventive control?

Segregation of duties is a preventive control because it divides critical tasks among multiple individuals, preventing any single person from completing or compromising an entire process. This reduces the risk of fraud, error, and misuse of privileges by requiring collusion for malicious acts. Configuration auditing is a detective control, identifying deviations from baselines after they occur. Log correlation is also a detective control, analyzing logs to identify suspicious patterns or incidents after they have happened. Incident alerts are detective and reactive controls, notifying personnel about security events that have already been detected.