Evaluate the extent to which the organisation is operating an effective internal control system. Using, Control environment

Risk assessment, Control activities,

Information and communication, Monitoring