Under any existing control objective in the Organization Content hierarchy, you can create one or more new controls, each of which specifies an action or process that will address the control objective.
To modify an existing control, click Edit.
To create a control, see Creating a New Control.
In addition to entries on the General tab, you can also click on the Guidance and Risks tab to specify guidance information on how to check the control, as well as add risks that this control is meant to address.