added controls and triaged threats