Evaluating internal control risk, divided into two parts;
PLANNING AND ANALYZING
DESIGNING
DRAFTING POLICIES
CLOSING MEETING