TCOs E and F) Sarbanes Oxley requires that per Section 404 that Internal Controls within a publicly held company are to be reviewed, evaluated, and tested at year end to ensure that adequate controls are in place. Explain and describe two of the three major methods to obtain and document their understanding of a companys controls.