This audit work program focuses on the control environment component of the COSO Framework. Sample risks addressed in this audit work program include: a code of conduct and other policies does not exist regarding acceptable business practices, conflicts of interest, or expected standards of ethical and moral behaviour; adequate staffing levels are not maintained to effectively perform required tasks; and an independent governing body that provides oversight for management's activities does not exist.