Authorization - controls that ensure only approved business users have access to the application system. Input controls - controls that ensure data integrity fed from upstream sources into the application system. Forensic controls - control that ensure data is scientifically correct and mathematically correct based on inputs and outputs