A method used by management, internal auditors, and external auditors verify that internal controls are designed properly and operating effectively.