What are controls designed to do in the crm?

The controls in the Composite Risk Management process are designed to reduce the risks of the process being addressed. The controls are meant to balance the risks and the benefits of any process.