management and internal control frameworks; a review of issues from past internal and external audits; and the prioritization of key risks and the engagement of executive owners charged with the creation of action plans to mitigate risks.