The Establishment of an Internal Control System
within the internal control system and includes assessing whether the control environment is satisfactory, whether risk assessment is timely and accurate, whether control operations are appropriate and accurate, and whether information and communication systems include the proper items. Monitoring can be ongoing or done on a casebycase basis.