“A brief description of the controls that are currently in place for the risk. At an early stage in the life of a project, the controls may be those that are expected to be in place if normal project management processes are followed.”