... organization's financial, information technology and operational processes to identify risks, areas for ... 's processes by reviewing manuals, policies, reports, financial statements, and other written materials, and by ...