Control
A designed practice that modifies risk or supports an intended outcome.
Definition
A control includes an objective, procedure, ownership, scope, cadence, evidence, and evaluation method. A policy statement alone is not necessarily an operating control.
Why it matters
Precise control records make testing, reuse, exception handling, and improvement possible.
Related reading
Controls and evidence →Reviewed August 15, 2026 by Veriqora Editorial.