This service involves adequacy assessment of the internal control structure design and testing of operating effectiveness to determine whether risks are being managed and/or mitigated, in addition to suggesting recommendations to address any identified weaknesses.