Controls
Control
A single governance check, independent of how many resources it was evaluated against. It is the unit GovIntel scores and reports.
Currentengine 9.0.0Verified 2026-08-30
What it is
One check: a question asked of an environment, such as whether root access keys exist or whether databases are reachable from the internet.
Why it is the unit
Because it is the only unit that does not move when the estate grows. Adding resources adds findings and changes nothing about how the environment is governed.
How GovIntel applies it
Every scanner record is collapsed to its control before scoring and before exposure. A control failing on forty resources counts once, and carries those forty resources.
What it does not mean
A control is not a policy, not a requirement, and not a framework obligation. It is a check the scanner implements.