A. On the Related Controls tab of risk definition, add the control.

B. To associate a control to a risk, the control needs to be in the Review state.

C. In the related object section of process definition, add the control to the risk.

D. On the Related Objects tab of control definition, add the risk.

E. The only way to create risk-control associations is through data import.