Entity-level controls IT audit controls IT governance Control environment Control framework Internal controls Risk management Control activities Control monitoring Compliance controls Control objectives Control assessment IT control framework Segregation of duties IT general controls IT control environment Control self-assessment Control testing Control deficiencies IT risk assessment