Find an article in the library that talks about internal control assessment. Based on the article and the reading in the text discuss what significant elements should a CPA firms methodology for assessing internal controls have? Why is each of these elements important? What risk does the CPA firm run if each of these elements were not included in the assessment of internal controls process?