in order to identify and establish effective controls, management must continually assess the risk, monitor control implementation, and modify controls as needed.
the companies must sign a statement of responsibility for internal controls and include this statement in their annual report to stockholders