Contextualizing Controls
The same control can be assessed in the framework of different contexts (for example process categories, processes or entities).
To enable this multiple assessment, you must "contextualize" controls, that is connect them to context objects.
You must connect controls to risks which are connected to process categories, processes or entities.
You may also connect controls to entities via the indirect link “Control->Process->Entity”, which means:• Connect process categories or processes to entities of the organization.
• Connect controls to process categories and processes.