The control catalog contains customizable and extendable control classes. A control class protects against a threat class. As with threat classes, all information can be derived and re-used in your specific TARAs. This includes attack feasibility definitions, technology tags or the reference to security properties.
