Add 2019 control remediation info and timelines

Why is this change being made?

This MR is replaced !34718 (closed), which isn't merging due to failed pipeline caused by missing branches. Right now, it's just more efficient to open an new MR. In short, this MR adds more information and timelines about control remediation work to increase transparency.

Does this MR meet the acceptance criteria?

Conformity

Merge request reports

Loading