… may be described as the control environment; the entity’s risk assessment process; the information system, including the related business processes relevant to financial reporting, and … will reflect the needs of management, the complexity of the business, the nature of the risks to which the entity is …