Authorization detective controls are the quiet sentinels that catch what prevention misses. When a preventative control fails, detective controls step in to identify, log, and escalate suspicious behavior before damage spreads. They don’t stop an action in real time, but they make sure you know what happened, when, where,