Assurance
The registers that show whether the system is being run as promised: adoption, governance, delivery, grievances, operating context, and the audit trail.
A control is proposed, implemented, or effectiveness reviewed. Describing a mitigation does not close a risk.