What elements should be included in an internal control structure?
What is business risk, inherent risk, audit risk, and control risk?
How does the auditor address fraud risk?
How would an auditor test the relationship between control risk and the internal control structure?