Terminology change: differentiate security controls from security requirements

[vanessuniq]

Change the term 'control' in components to 'requirements' to deconflict the concept unit testing controls (using inspect) from the security controls from NIST