?

When determining which controls to audit, an internal auditor should focus primarily on the relevance of those controls to the