Internal controls (give 2 recommendations) Where are the risks? How can we reorganize or shift job responsibilities to mitigate risks