Risk control measures are the actions that reduce the likelihood or impact of a risk: human oversight, testing, data filtering, limiting uses, monitoring, training. Each identified risk is linked to measures, an owner, and follow-up.
Example
Data leak risk -> measure: use only an approved tool with anonymized data.