Controls are tactical tasks that need to be implemented by the organization to put policies into action and reduce organizational risk.