Controls · The control owner · Element

The competence

Whether whoever operates the control can actually do so.

The part

What it is

Controls requiring judgement need people who have the context to exercise it, and that context is frequently assumed.

A control operated by someone who does not understand what it is looking for produces evidence without assurance.

The smallest level

The attributes it carries

Each attribute is one of the framework’s shared types. What a date is, and how it is written, is defined once for the whole model — the note here says what it means in this particular place.