An action or process that is put in place to reduce the frequency or severity of an operational risk loss event. A control can also prevent the loss event from happening in the first place, or detect the emergence of the risk event.