JPMorganChase interview question

How do you assess a control?