What are controls designed to do in Composite Risk Management?

Controls are designed to reduce and or manage risk in composite risk management. Controls can include designation of media contact, chain of command and incident report procedures.