Document existing processes through flowcharts and/or written narratives illustrating specific risks and internal controls strengths and weaknesses through objective evaluation of evidential matter.