control risks