Documenting, testing and evidencing the internal controls over financial reporting, and making that evidence retrievable for internal and external auditors. Does not perform accounting work; it proves the accounting work was performed properly. Almost entirely a documentation and evidence problem rather than a computation one.