Create security_controls.md