Control Analysis:

Discuss the overall adequacy of controls used in each sub-system under review. Discuss the efficiency and effectiveness of controls (if an operations or information system goal has no plan listed under it on your matrix, why not? Does an expensive control support a single goal? Is this appropriate, in your judgment? Are there control deficiencies in your system design due to cost effect constraints, software incompatibility with your preferred system etc.? If so why is this appropriate, in your judgment? Discuss the mix of preventive, detective, and corrective controls. Form a conclusion as to the quality of the controls, based on the systems environment and user needs.