Based on these rules, we proceeded with the documentation of process-level controls over fi nancial reporting, identifi cation of risks and organization of controls, and assessment of the implementation of controls.