Organizations use a number of internal controls to address their business operation’s risk and comply with various regulations. However, set-up and maintenance of these controls add extra cost. Often a risk control framework is implemented where one risk may be addressed by multiple redundant controls. In order to optimize the cost of compliance, an organization needs to eliminate or reduce redundant controls. Selecting the best applicable control requires a detailed process of control optimization.