Implementing Controls
To specify the fulfillment of a control:

Access the
Characteristics > Scope property page of the control.
The control can be implemented by, for example:
• a process: this can be the process on which the control is implemented or it can be a risk preventive process (example: "Account manager training" to prevent the "Overselling" risk)
• an operation: this is the operation on which the control is executed.