- Open Controls and add or edit the reference, title, domain/sub-domain, type, frequency, owner, status and description.
- Describe what the control does and what evidence demonstrates operation. Link requirements and risks using the maintenance controls available in that installation.
- Open Record and maintain control tests. Select the control, test date, tester, result and notes; attach or reference evidence where available.
- For a failed or partial test, create follow-up work and review the affected risk assessment rather than changing the result to pass.
- Reopen the control/test and check its links and saved result.
Complete when: Another reviewer can identify the control owner, expected operation, latest test and outstanding work. Framework coverage measures links to active controls; it does not establish that every control works effectively.