Controls
Controls
A control is a safeguard that reduces a risk. In Risk Management for Jira controls live in a library that is independent of any one risk, so the same control can be attached to many risks and maintained in one place.
In this section
| Page | What it covers |
|---|---|
| The control library | Creating and maintaining controls, effectiveness, ownership and review cycles. |
| Attaching controls to a risk | Existing and planned controls, and the per-risk settings you give each one. |
| Compliance frameworks | Installing ISO 27001, NIST CSF or SOC 2 as a pack of controls and fields. |
The idea that matters most here: a control’s contribution is decided per risk, not globally. The same control can cut 40% off one risk and 10% off another, because that is how controls behave in reality.