Controls · The control set · Element
The design
How the control actually works, including whether it can be bypassed.
The part
What it is
A system control that can be overridden is a detective control at best, and the override needs its own control.
Segregation of duties is the standard design principle and is frequently impossible in small organisations, which then need a compensating control rather than a pretence.
The smallest level
The attributes it carries
Each attribute is one of the framework’s shared types. What a date is, and how it is written, is defined once for the whole model — the note here says what it means in this particular place.