R & U: Understand the elements of an entity’s control environment, including the design and implementation of entity-level controls and IT general controls.