Last reviewed and updated | October 20, 2026
Control
A policy, process, procedure, or technical safeguard designed to reduce risk, enforce requirements, or achieve a specific security or compliance objective.
Why it matters
Controls are the mechanisms organizations use to protect assets, manage risk, and demonstrate compliance. Without controls, risks remain unmanaged and outcomes become difficult to measure.
How it works
- Identify the objective or risk.
- Design the control.
- Implement and operate it.
- Monitor and validate its effectiveness.