- is designed to accomplish the management objective (this module, page 1)
- has controls that provide reasonable assurance that the process will work as intended
- is implemented and functioning as designed
- is actually achieving the desired management objective(s)