This section of Protiviti's "Guide to The Sarbanes-Oxley Act" addresses common questions concerning validating the operating effectiveness of internal controls. Some topics covered are: Why are control descriptions important and how does management know they are adequate? How is monitoring evaluated? And, how much testing should management perform relative to the testing that the external auditor performs?