Can this information be considered adequate for evaluating internal control of MIS activities? This question presumes that there are no additional significant internal auditing procedures, accounting controls, administrative controls, or other circumstances that impair any controls or mitigate any weaknesses noted above. (Note: Explain negative answers briefly, and indicate conclusions as to their effect on specific examination or verification procedures.)
Based on a composite evaluation, evidenced by answers to the previous questions, internal control is considered to be (good, medium, or bad).