Design and document overall compliance strategy related to the IT environment, including scope management, timing, resource assignment, conflict resolution, managing deficiencies and resolution, and reporting related to the IT controls (e.g., general and application controls).