POCs from__________is responsible for establishing and integrating internal control into its operations in a risk-based and cost beneficial manner, to provide reasonable assurance that the entity's internal control over operations, reportin, and compliance is operating effectively