A control that may prevent a possible event (e.g., fraud, error, non-compliance) from occurring.