This section of Protiviti's "Guide to The Sarbanes-Oxley Act" addresses common questions concerning validating the operating effectiveness of internal controls. Some topics covered are: Who is responsible for validating operating effectiveness? What is “testing of controls”? And, how does management determine the appropriate sampling method?