Control self-assessments are performed at least annually to gain assurance that controls related to the security, availability and confidentiality TSCs are in-place and operating effectively. Corrective actions are taken based on relevant findings and tracked to resolution. This would include the Effectiveness Measurement Register (EMR).