Which of the following is NOT a type of control in risk management?

In risk management, controls are essential tools used to mitigate risks and ensure that organizational objectives are met effectively. The types of controls typically recognized in this field include preventive, corrective, and directive controls.

Preventive controls are designed to deter unwanted events or behaviors from occurring. They aim to eliminate or reduce the chances of a risk event happening in the first place. Corrective controls are implemented after a risk event has occurred, focusing on rectifying the situation and addressing any damages or breaches that have taken place. Directive controls serve to guide or influence the behavior of individuals within an organization to ensure compliance with risk management policies and procedures.

"Creative" or "innovative" is not a recognized category of controls in the risk management framework. While innovation may be an important component of the broader organizational strategy, it does not fit the established typology of controls designed specifically for risk management purposes. Thus, identifying innovative as not being a type of control helps to clarify the framework within which organizations operate to manage risk effectively.