Control ID and purpose,How the control operates,Evidence location and period,Test plan and sample,Result and exceptions,Remediation and owner,Retest and review
,,,,,,