Internal controls mitigate risks. Risks involve both threats of bad things happening and threats of good things not happening. Chose any organization you are familiar with. Compose a $2-3$ page word document identifying $2$ internal controls that you feel are relevant to that organization. For each control identified, indicate whether the control is designed to mitigate the threat of bad things happening or the threat of good things not happening. Briefly describe the objective the control is designed to achieve and the risk the control is designed to mitigate. If applicable, describe how the control is meant to operate and how you would test the control to determine if it is operating effectively.