Controls

Set implemented when procedures are in place; set operating when the control runs in production. Record assessment to set whether the control is effective — that is independent of implementation.