Testing The Operating Effectiveness Of Identified Controls: Timing Overview