Information system controls must be embedded in the operations of the company and form part of its culture. They should make it capable of responding quickly to evolving risks in the business. These controls should meet the basic criteria of effectiveness, efficiency and economy and be acceptable to inspection by a regulatory organisation [ISACA recommendations]

1. What does control mean?
2. In a short paragraph, discuss why controls need to be acceptable to inspection?
3. In a short paragraph, explain what basic criteria mean in this context.
4. In a short paragraph, explain what does responding quickly mean in this context.