The Control Catalog contains customizable and extendable Control Classes. A Control Class protects against a Threat Class. As with Threat Classes, all information can be derived and re-used in your specific TARAs. This includes attack feasibility definitions, technology tags or the reference to security properties.
For more information on using the Controls, see chapter Controls or Threat Analysis and Risk Assessment for a general overview.