In an integrated application environment, controls are embedded
and designed into the application that supports the processes.
Business process control assurance involves evaluating controls at
the process and activity level. These controls be a combination
of management, programmed and manual controls. In addition to
evaluating general controls that affect the processes, business process
owner-specific controls—such as establishing proper security and
segregation of duties, periodic review and approval of access, and
application controls wath in the business process—are evaluated.