A measure that is put in place to modify a risk.
ISO 27001 - Annex A.7 - Human resource security
ISO 27001: The top 4 most failed controls