A control detects unauthorized changes after they occur but does not block them. How should it be classified?

1. Avoidance
2. Detective
3. Risk acceptance
4. Preventive solely because it is automated