Incidents can be mapped directly to the set of controls that would have prevented the incident.
To map an incident to a control:
Go to Incidents > Incidents and then select an incident to open its details page.
Click the Controls tab, then click Map to Control.
Select the control to map to the incident. Note that mapping is not transitive--that is, mapping an incident to a control does not automatically map it to the control's parent or children in the hierarchy.
To disassociate a control with an incident:
Go to Incidents > Incidents and then select an incident to open its details page.
Click the Controls tab, select the control and click Unmap.