"--as well as define controls and procedures."