This audit work program focuses on the monitoring component of the COSO Framework. Sample risks addressed in this audit work program include: internal and/or external audit comments and management responses are not provided to the audit committee or board of directors and internal audit does not have the authority to review any aspect of the entity's operations.