A control is the requirement — what the standard says has to be true. Controls come from the standard, and every control on COMPASS traces back to the exact clause it came from. Nothing is invented, and anything can be checked against the source.
A task is the piece of work someone actually does to make the control true, and to show it's true. Every control creates at least one task. Each task has an owner, a due date, and a list of the evidence needed to close it.
Controls are fixed. Tasks are not. How many tasks a control creates, who they go to, and what each one is pointed at — that comes from your environment.