The longer description of the security standard control. Provides information about what the control is checking for.