In addition to obtaining an understanding of the internal control process, the American Institute of Certified Public Accountants' Statement on Auditing Standard 109 requires an auditor to ...

Internal control—a process affected by a college or university's governing board, administration, faculty, and staff—is designed to provide reasonable assurance regarding the achievement of objectives ...