A good internal control includes:
* Control environment
*Risk Assessment
*Monitoring and reviewing
*Information and communication
*Control activities.
_Administrative management is responsible for maintaining an adequate system of internal control.
_Mangement is responsible for communicating the expectations and duties of staff as a part of a control environment