Controls are the technical, administrative or physical safeguards that exist to prevent, detect or lessen the ability of a threat to exploit a vulnerability. Procedure. Procedures are a formal method of doing something based on a series of actions conducted in a certain order or manner.