On the controls screen of a risk, providing an overall grading of the control strength for that specific risk. This could be automated and manually overwritten as needed.