💡 A firewall is a preventive control because its primary purpose is to block unauthorized access to a network or system, thereby preventing security incidents from occurring. Firewalls monitor and filter incoming and outgoing network traffic based on predefined security rules, ensuring that only authorized traffic is allowed. Preventive controls are designed to stop incidents before they happen, and firewalls are a classic example of this type of control.