Chapter 4 Risk Assessment and Internal Control