EY interview question

Relating IT process and controls and risks.