audit committee, authorizations, board of directors, control activities, control environment, COSO, documents and records, monitoring, reporting responsibilities, risk assessment, separation of duties, SOX requirements, transaction-related audit objectives