This section of Protiviti's "Guide to The Sarbanes-Oxley Act" addresses common questions concerning identifying, documenting and assessing internal controls. Some topics covered are: How should control gaps be identified and summarized? How does a company define a “significant deficiency” in internal control? And, how does a company define a “material weakness” in internal control?