"Elements such as controls, job management, defined and well managed processes,[2][3] performance and integrity criteria, and identification of records" . . . .