An improperly established relationship between IT and users poses the risk that users may make ineffective use of corporate data. Users are either unable to access corporate data or that data is not used effectively. The objective of this questionnaire is to define adequate control procedures and to determine whether those procedures are in place.