The objective of the suite of controls is to reasonably ensure risk is mitigated, by reducing the likelihood of a certain event occurring
Likelihood can rarely be reduced to zero
Internal controls seek to reduce the risk to a ‘reasonable’ level
The objective of the suite of controls is to mitigate risk
-Can never drop the risk of an event to 0
-But can reduce to a reasonable level – which management determines is appropriate