• Ongoing and separate evaluations on internal controls over
financial reporting
• Identifying and reporting deficiencies
• Assessing the quality of internal control performance
over time
• Putting procedures in place to modify the control system as
needed (add, change, delete)
• Ensuring effective management review of control
system status
• Checking for the absence of monitoring systems, which tends
to allow people to reduce vigilance on controls
• Utilizing relevant external information or independent
monitors
• Analyzing control objectives and their related control
activities
• Reviewing changes to controls since the date of the last
report or within the last 12 months