2. Control environment, entity-level controls and IT general controls