On the left is a list of Controls you have defined. On the right is a list of threats you defined. You can combine these however you need to create a custom Control in the Catalogue.

Controls Threats
Here you can add Controls to the Controls Catalogue. Controls are proactive measures put in place to prevent potential threats. Controls can be technical (like firewalls or encryption), organizational (policies or procedures), or physical (locks or barriers). The term "control" implies an ongoing, systematic approach to security.