. . . "remediate control deficiencies and risks, including material" .