Can you assess risk management without considering related internal controls? I don’t think so. The relationship between risk (what might happen to affect the achievement of objectives) and internal ...