Glossary

What is Control?

A defined activity or mechanism that reduces a risk or satisfies a requirement — an access review, an encryption standard, an approval gate. In modern GRC, one control is mapped across every framework it satisfies, so the work is done once and counted everywhere.