Citi Interview Question

How would you assess and implement controls?