Control and Control Instance configuration

The Control settings can be changed in the repository configuration and requires the user to have the Manage Control Configuration permission.

Control Types

When you create a Control object you need to specify a Control Type. An object can only be of one control type at a time, this setting can be changed later.

The types available for the author creating a Control object can be edited from the configuration screen. 

Control Instance Types

When you create a Control Instance object you need to specify a Control Instance Type. An object can only be of one control instance type at a time, this setting can be changed later.

The types available for the author creating a Control Instance object can be edited from the configuration screen. 

Risk Categories

The categories displayed on a Control or Control Instance object are Risk Categories, if you want to change them please see Risk and Risk Instance configuration.

Control Ratings

The rating values and weight values are used to calculate the residual risk value for. See Residual Risk Calculation for further information.