Design control tests or self-assessment plans in the form of surveys and questionnaires. Select control samples, and assign them to control owners, including testers and assessors. Document the results of control tests or self-assessments, capture non-compliance issues, and certify the effectiveness of the controls.