This section of Protiviti's "Guide to The Sarbanes-Oxley Act" addresses common questions concerning identifying, documenting and assessing internal controls. Some topics covered are: How are processes and transaction flows documented? What is the external auditor looking for with respect to the period-end financial reporting process (close the books)? And, what level of assurance must management attain when reaching a conclusion on the design and operating effectiveness of internal controls?