Written for Administrators to look up the names
Control
A control objective applied to one scope item, with a named owner and a live status. This is what gets tested.
One objective, one scope item. Mitigates many risks. Checked by many assurance activities.
Fields
| Field | Type | Meaning | Example 1 | Example 2 |
|---|---|---|---|---|
number | autonumber | Unique identifier | CTL-0451 | CTL-0467 |
objective | reference to x_irm_objective | Objective it implements | OBJ-021 | OBJ-034 |
scope_item | reference to x_irm_scope_item | Where it operates | SCP-110 | SCP-110 |
owner | reference to auth_user | Person who runs the control, or who holds the opinion on a supplier's control | Platform Engineering Lead | Product Manager, Tracking |
operated_by | choice | Internal or third party | Internal | Internal |
engagement | reference to x_irm_engagement, optional | Set when a supplier operates it, as CTL-0512 is by Kestrel under ENG-022 | None | None |
status | choice | Draft, operating or retired | Operating | Operating |
last_result | choice | Outcome of the latest check | Effective | Ineffective |