Examine internal IT controls, evaluate the design and operational effectiveness, determine exposure to risk, and…