How to structure an operational control register with risks, controls, evidence, owners, frequency and testing status.
Control ID, process, risk or failure mode, control description, type, owner, evidence, frequency, last-tested date and status.
A control is stronger when a third party can see what was checked, when it was checked, who performed it and what happened when it failed.