Audit programs designed to enable audit, risk and security professionals to evaluate risks and controls in existing implementations or to faciliate the design and building of stronger controls as part of the system implementation, upgrades and enhancements.