Security Control Reporting is a systematic academic framework that specifies the generation, documentation, and communication of assessments related to the implementation, effectiveness, and compliance of security controls within an organization’s information security management process.