Risk controls can be inherent design measures, protective measures, information for safety, process controls, training, alarms, or labelling. Prefer design controls over warnings where possible.
For each control, identify the evidence that shows it was implemented and verified. That might be a test report, design review, usability validation, software verification, process validation, or label review.
If a control relies on the user noticing and acting correctly, make that assumption visible. Experts will often scrutinize user-dependent controls more closely.
Official references
This article is practical product guidance, not legal advice. Confirm regulatory deadlines and obligations against current official sources and your assigned expert.