(1) Exercised general control over the operations of the company principally liable; and (2) Possessed the power or ability to control the specific transaction or activity on which the primary violation was predicated, even if that power was not exercised.