Control Policy Monitoring
Risk identification and analysis highlighted a certain number of risks against which it is important to be protected. It is necessary to define the control activities that will prevent these risks and reduce their potential consequences.
These controls must be formally defined in order to meet regulatory requirements such as the Sarbanes-Oxley Act or Basel II agreements in the banking world.

A control is a set of rules and means enabling the assurance that a legal, regulatory, internal or strategic requirement is respected.