case $3\mathrm{.}8$ The Boeing Company

$1.$ The COSO internal control framework identifies five internal control components. which of those component is most relevant to the procedures that SOX mandates pubic companies establish to enable, if not encourage, whistleblowing by corporate employees?

$2.$ Would it have been unethical or otherwise inappropriate for Neumann and Tides to have directly commucated their concerns regarding Boeing's IT control to the company's Deloitte auditors? Explain $.$ assuming that Neumann and Tides had done just that, how should the Deloitte auditors have responded?