CISA - Information System Auditing Process - Planning - Types of Controls and Considerations