In an integrated application environment, controls are embedded
and designed into the application that supports the processes.
Business process control assurance involves evaluating controls at
the process and activity level. These controls be a combination
ofmanagement, programmed and manual controls. In addition to
evaluating general controls that affect the processes, business process
ovmer-specific controls—such as establishing proper security and
segregation ofduties, periodic review and approval ofaccess, and
application controls wathin the business process—are evaluated.