Where to manage Narratives

Summary: My client uses narratives and wishes to reference the narrative from processes and controls

Content (required):

My client has narratives that may span one or many processes and reference one or many controls. I was considering defining processes and attaching the narrative. The issue I found in this approach is using the related records does not allow direct association to controls. Instead you must use risks as related records in processes and then controls can be related to the risks. The client does not have risks formally defined and is planning to do this in a later phase. The internal control workflow is best described by the diagram below. Any suggestions