Internal Control consists of 5 components:
The Auditor is required to document the understanding of entity's internal control and the basis for concluding that control risk is below maxmam.