Control Library Maintenance

Keep one catalog of controls mapped to the risks they address, so a control is not designed twice or forgotten once.