control environment (EBOCCA)
Ethics, board oversight, organizational structure and authority, commitment to employee competence, accountability
Risk Assessment (CORR)
Identify/analyze Change, Specify Suitable objectives, Id/Analyze Risk, Assess Fraud Risk
Control Activities (CIPP)
Develop control activities, develop IT controls, Policies and Procedures
Information and Communication (RIE)
Relevant Info, Internal and external communications
Monitoring (ED)
On-going evaluations communicates Deficiencies