Evaluating and Improving Internal Control in Organizations

costly compliance efforts. However, this obscures the fact that the right kind of internal controls— enabling an organization to capitalize on opportunities while offsetting the threats—can actually 1 See Appendix A of this guidance for further definitions of governance, risk management, and internal control.

  Efforts