controls

Policies, procedures, guidelines, practices, or organizational structures that manage security, privacy, and other risks.