# Controls

> Browse, scope, assign and implement the controls in your programs.

Source: https://docs.csquaregrc.com/guides/controls


Controls are the requirements of a framework, expressed as things your organization does. The **Controls** library lists every control in your programs with its status, owner and evidence.

## Control status

| Status | Meaning |
| --- | --- |
| Not started | No work recorded. |
| In progress | Implementation is underway. |
| Implemented | The control operates and has current evidence. |
| Not applicable | Out of scope, with a recorded justification. |

## Applicability

The Control Applicability Wizard proposes which controls apply based on your organization profile. Every not-applicable decision keeps its reason, so auditors can see why.

## Narratives

Each control can carry a narrative describing how you meet it. Fibo can [draft narratives](/fibo/control-narratives) from your existing evidence and policies for you to edit.

## Ownership

Assign owners individually or in bulk by department. Owners get tasks when evidence goes stale or a review is due.