Information and communication
Management need to communicate the policies to all employees (through policies documents or training)
Management should encourage employees to follow company policy
Employees need access to the information they require to perform the controls
Monitoring
Evaluation of internal controls should be an ongoing process
There are a couple key factors that ensure internal controls are successful in mitigating risks