Hello,
As per my knowledge the structure of mitigation controls is not stored in any GRC tables.
But there is a standard report in NWBC under Reports and Analytics -- Access Risk Analysis Reports -- Mitigation Control Report which can give you the details you are looking for.
Hope this helps.
Regards,
Manju
