People, process and systems and a little risk and controls management thrown in for good measure.