Thesecontrols include such things as separation of duties, internal audit reviews, estab-lished and enforced policies and procedures, personnel controls, and the like.Audit controls relate to reacting to transactions that have already occurred, whilemanagement controls relate to proactive steps for creating improved results.