The internal control function can be divided into five areas, which are; control environment, risk assessment, control activities, information and communication and follow­up, further described below.