This systematic method for developing computer-based controls to mitigate identified risk areas and to strengthen internal controls can help agencies implement an effective compliance program. These guidelines should help agencies analyze the extent to which their information systems support the controls that are needed. If an agency believes that it needs more or stronger computer-based controls, these guidelines can serve as a starting point for developing and implementing those controls.