Identify 3 to 5 internal controls when negotiating what an organization could implement to ensure compliance and mitigate against risk.

Identify the specific risk that each internal control is designed to address and propose ways an organization can audit and measure the effectiveness of each internal control