Internal Control Assurance Framework: FAQ's