1. Controls or internal controls are defined in the GIAS and part of the internal audit continuum. Providing an opinion on internal controls would be included in the annual report by the CAE. Audit committees value internal audit concluding on the state of internal controls and will often encourage the CAE to do so. This conclusion must be supported by relevant, reliable and sufficient information.
2. There are examples of statements that can be used for various control assessments from ranging from strong / needs improvement / suboptimum.
3. There are 7 helpful steps for developing an annual control conclusion using a contemporary approach.