In composite risk management what are controls designed to do?

The composite risk management the controls are designed to make military related decisions. The effective control measures where the specific standards do not exist.