This document is a sample application control review risk control matrix (RCM) that can be used while reviewing the existing application controls of an organization. It can also act as a basic checklist for organizations which have applied or plan to apply Enterprise Resource Planning (ERP) software.