Change management procedures - controls designed to ensure the changes meet business requirements and are authorized. Source code/document version control procedures - controls designed to protect the integrity of program code Software development life cycle standards - controls designed to ensure IT projects are effectively managed. Logical access policies, standards and processes - controls designed to manage access based on business need.