Every control has two coordinates. How it is built: Administrative/Managerial, Technical/Logical, or Physical. When it acts: Preventive, Detective, Corrective, or Compensating.