A control is the protective mechanism itself -- often the more formal, audit- or compliance-flavored term for the same kind of thing a safeguard names. Friction is the extra effort or resistance that mechanism imposes on the person going through it. They aren't synonyms: a control deliberately creates friction, but the two words answer different questions.
The test: which half of the situation is named?
The test is the same one that applies to safeguard: does the sentence name the protective mechanism, or the cost it imposes on the person going through it? "We implemented a segregation-of-duties control on payment approvals" names the control -- the mechanism. "That control adds a full day to every payment run" names the friction -- what the mechanism costs the person experiencing it.
Control: "Finance implemented a segregation-of-duties control so the person who submits an invoice can't also approve it."
Friction: "That control means every invoice now waits for a second person's sign-off before it's paid -- a day or two of friction added to a process that used to be instant."
Control vs its more general sibling, safeguard
"Control" tends to show up in more formal, audit-, compliance-, or security-flavored contexts than its more general sibling, safeguard -- an "internal control," an "access control," a "security control" -- but the underlying boundary against friction is identical: naming the control is not the same claim as naming the friction it creates, and a stated control can make some friction worth keeping rather than something to eliminate on sight.
Want to learn "Friction" in depth?
Lyra Practice teaches advanced non-native professionals the nuance of high-value expressions like this one, then has you practice using them in realistic work scenarios.
Start learning for free →"Auditors flagged the old process as a real risk, so the control stays even though it's the reason payments now take longer -- the friction is the acknowledged cost of closing that gap."
Why the mix-up matters
The common mistake is treating "friction" and "control" as interchangeable, or pushing to remove a control purely because it adds friction, without weighing what specific risk the control is closing. In audit and compliance contexts especially, this mistake carries real weight: a control usually exists because an identified risk needs it, and proposing to remove it on friction grounds alone, without addressing the underlying risk, can reopen exactly the gap the control was built to close.
The more precise move, as with safeguard, is to name the control and the friction it costs as two separate claims -- what protection is this control providing, and is the friction it adds proportionate to that protection -- rather than treating "it adds friction" as a self-sufficient argument for removing it.
Naming both makes the trade-off visible
A proposal that says "let's cut the friction in the payment process" sounds like a pure efficiency win. A proposal that says "let's remove the segregation-of-duties control, which will save a day per payment run but reopens the exact fraud risk our auditors flagged" makes the actual trade-off visible, and puts the decision where it belongs -- with someone who can weigh that specific risk, not with whoever finds the extra day most annoying. This is the practical payoff of keeping the two words separate in audit and compliance contexts especially: "friction" alone hides what's being risked, while naming the control next to it keeps the real cost of removing it in view.
Practice scenarios
Practice using friction in situations like:
- naming a mechanism as a control separately from naming the friction it creates
- weighing whether a control's friction is proportionate to the risk it's closing, rather than arguing for removal on friction grounds alone
- distinguishing control from its more general sibling, safeguard, by register and context
Useful practice phrases:
- "That's the control; the extra day it adds to every payment run is the friction."
- "We can't remove this control just because it adds friction -- what risk does it close?"
- "The friction is the acknowledged cost of the control staying in place."
A control is the mechanism, often named in audit or compliance language; friction is what that mechanism costs the person going through it. Removing the friction without addressing the control's purpose reopens the risk it closed.
Lyra Practice helps advanced non-native English professionals learn the nuance of high-value workplace expressions and practice using them in realistic scenarios, so their English sounds natural, precise, and senior at work. Try Lyra Practice.