ABCRs system design is a web-based application in-house programmed using JAVA and is built on an SQL database. ABC separates data and applications by using separate physical servers for data storage, code, and web-based delivery. Executable code exists within the application server, web portal and within the database as triggers executed upon updating a specific field within a database record. All changes to database triggers must comply with the Change Management Policy. What are the controls and what are the gaps?