This includes a consideration of the company’s vulnerability to fraud, as well as an evaluation of the design and operating effectiveness of those internal controls intended to prevent and/or detect fraudulent activities at a significant level.