We used the Group risk management software to analyse those controls and to determine triggers and minimum performance standards, allowing a fuller understanding of the parameters that make each control effective.