In composite risk management what are controls designed to do?

Controls are designed to reduce and or manage risk in composite risk management. Controls can include designation of media contact, chain of command and incident report procedures.