In this section, you can register enterprise controls that detail procedures and practices to be adopted to minimize the impact a risk may have on the organization should it materialize and reduce the chances of it occurring. Controls can be associated with one or more risks from the risk register and must be monitored to ensure not only that they are implemented, but also that they are kept up-to-date and are effective.
Enterprise controls can be registered and edited through the system interface or offline, through a spreadsheet, and then imported back to the system.
In the Objects and Attributes section, attributes can be created for controls. Note that the order defined for control attributes affects not only the interface, but also the default column order in the list and the order of the fields in the spreadsheet.