A risk-control matrix maps risks to corresponding controls, showing control effectiveness against specific risks. Create by identifying all risks, documenting existing controls, assessing control adequacy, identifying gaps, and maintaining currency. This tool ensures comprehensive risk coverage.
