This process consists of:

Ÿ Reviewing policies and procedures
Ÿ Evaluate of regulatory compliance
Ÿ Assess internal controls
Ÿ Examine record-keeping
Ÿ Interview staff
Ÿ Review contracts and agreements
Ÿ Analyze financial data
Ÿ Test controls and systems
Ÿ Identify risks and vulnerabilities