Add risk scenarios that can be mitigated by the generic control
What does it mean to mitigate a risk?
When a control mitigate a risk scenario it means that by performing the control (or security measure), the impact of the risk or the probability that the risk occur, will be diminished.
Click on “add risk scenario” to open a pop-up window from where you can filter and search for an appropriate risk scenario that the generic control has some mitigating effect on.