Control Coverage Summary — by threat type