Non-discretionary controls are:

subject to human choice or judgment

customary controls with which all auditors are familiar.

automatically provided by the system and cannot be bypassed, ignored or overridden based on human judgment.

addresses intangibles such as competence, values, openness and leadership and more difficult to grasp.