Controls

Overview

Regulatory requirements give rise to risks, which organizations mitigate by implementing Controls. A Control may span multiple locations, legal entities, and business functions.

The effectiveness of a Control is periodically reviewed (triggered by an event or at a specific frequency) by testing auditable evidence. This testing helps determine whether a Control is effective and whether an organization complies with regulatory requirements.

Navigating to Controls

1. Open the left-side navigation bar

2. Select Controls to open the section.