Such a review includes ( 1 ) examining the general and application controls of a computer system , 3 ( 2 ) testing whether those controls are being complied with , and
Computer controls cannot be learned .