The ability to view or edit risk control matrices associated with specific organizational units or processes can be restricted based on role or user. For further information on assigning roles relating to the Risk Control Matrix, see Assign Entity-Specific Role Membership via the User Interface.