Select Risk Register on the side menu and choose the risk you wish to add a control measure to.
Scroll to the bottom of the page and select the Current controls tab.
Any existing controls will be shown here and select Add control to be taken to a new page to complete all the details of your new control.
All fields are mandatory and can be edited at a later date, if required.
Adequacy - How effective is this control? It is likely that at the time you create a control, the Adequacy is unknown, in which case, you can leave this field as Not Applicable and update this field when you conduct your next control review.
Assurance - How confident are you that the business objectives will be achieved with a tolerable level of residual risk? Again this may be unknown at the point of creating the risk control, in which case, you can leave this field as Not Applicable and update this field when you conduct your next control review.
Once you are happy with the details of your control select Save to be taken back to your risk.
The new control will show under the Current control tab at the bottom of the page.
To edit a control select the one in question and you'll be brought back to the details page to edit the information.
You may add as many controls as you require by repeating the process above.