there are four steps in the auditors process of understanding internal control and assessing control risk for a public company. The first step is to obtain and document an understanding of internal control: design and operation. What are the remaining three steps