Assessment of an individual control or set of controls for effectiveness in the detection, mitigation, or prevention of a risk loss event. The question asked is, “How well is the control working?”. Control analysis can also include reviewing the types of controls in place, to determine overall effectiveness. In this case, the question asked is “Do we have the right controls in place?”