?

Auditors regularly evaluate controls. Which of the following best describes the concept of control as recognized by internal auditors?