Auditing Special Purpose Frameworks: Key Controls