This section of Protiviti's "Spreadsheet Risk Management: Frequently Asked Questions" addresses common questions about assessing spreadsheet controls and current risk exposure. Topics covered are: Do we need to assess the controls in operation across all our spreadsheets? How do we consistently assess controls across spreadsheets? And, who is responsible for accepting the residual risk that exists within a spreadsheet?