The intent of this document is to assist control owners, process owners and internal audit with implementing and executing a control self-assessment (CSA) process. CSA is an organized means of using the knowledge of those who are most familiar with a topic, such as processes/controls. This process is also used to evaluate how effectively the organization is managing risks.