What controls are designed and configured to carry out a specific set of instructions based on criteria defined by management?