Controls are the assumptions, rules, systems and procedures that govern how an organisation
exerts control over the processes. In terms of the supply chain they may be order quantities, batch
sizes, safety stock policies etc. plus the policies and procedures that govern asset and transport
management. Control risk is therefore the risk arising from the application or misapplication of these
rules. It is associated with the company’s planning and management activities including the quality,
accuracy and reliability of its operating with regulations and standards. This is a broad category of
risk, which as explained previously, is the planning and control perspective of the process risk
(execution). Control risks are almost invariably self-induced by either omission or commission. They
could include: