Question: What is the name of the internal control environment framework $($referenced in the textbook$)$ that the auditor should assess? What are the five components of this framework? $($As the textbook suggests, you may need to return to Chapter Three to fully answer the second question.$)$ Finally, in this process, where should the auditor focus his or her attention in the process of performing the risk assessment on this service organization?