In an integrated application environment, controls are embedded
and designed into the application that supports the processes.
Business process control assurance involves evaluating controls at
the process and activity level. These controls be a combination
ofmanagement, programmed and manual controls. In addition to
evaluating general controls that affect the processes, business process
ovmer-specific controls—such as establishing proper security and
segregation of duties, periodic review and approval of access, and
application controls wathin the business process—are evaluated.