What are the components of an organizational framework for security and control?

1.    Define general controls and describe each type of general control.
2.    Define application controls and describe each type of application control.
3.    Describe the function of risk assessment and explain how it is conducted for information systems.
4.    Define and describe the following: security policy, acceptable use policy, and identity management.
5.    Explain how MIS auditing promotes security and control.