Which type of monitoring is focused on actively identifying irregularities that may represent risks?

The focus of detective monitoring is on actively identifying irregularities or anomalies that could indicate potential risks to an organization. This type of monitoring involves the use of various tools and processes to continuously scan for unusual activity or breaches that deviate from normal operational patterns.

Detective monitoring plays a critical role in an organization's security strategy, as it helps in the early identification of security incidents or policy violations, enabling timely response measures. For instance, a detective monitoring system may generate alerts when unusual login attempts or data access patterns occur, signaling a potential threat that needs further investigation.

In contrast, the other types of monitoring serve different purposes. Corrective monitoring is designed to take actions to fix issues after they occur, while preventative monitoring focuses on implementing measures to avoid risks before they happen. Reactive monitoring responds to security incidents after they have been detected, rather than actively identifying them in real-time.