Internal controls can be built into manual / administrative process steps and / or computer system procedures.
In such a scenario, the manual, administrative process controls outside the computer system should be clearly documented, enforced and regularly exercised.