RSM Interview Question

About internal control testing, risks