The primary purpose of assessing internal controls in federal entities is to support management in achieving the entity's objectives. As defined by the Government Accountability Office (GAO), one of the three fundamental objectives of internal control is to ensure the effectiveness and efficiency of operations. The assessment process, mandated by OMB Circular A-123, is a key management tool to evaluate how well the control system is functioning. This evaluation inherently involves identifying control weaknesses and process deficiencies, which directly leads to discovering opportunities to improve program performance and gain efficiencies.

A. Internal controls are designed to provide reasonable assurance, not an absolute confirmation or guarantee, that management objectives will be met.

C. Internal controls aim to mitigate the risk of fraud, waste, and abuse, but they cannot ensure or completely eliminate their occurrence.

D. Determining which laws and regulations apply to an entity is a legal and compliance function that precedes the design and assessment of internal controls.

1. U.S. Government Accountability Office (GAO). (2014). Standards for Internal Control in the Federal Government (GAO-14-704G, "Green Book").

Page 10, Section OV1.01: "An entity’s internal control system helps its management achieve its objectives. Management specifies objectives for the entity and then designs and implements an internal control system to provide reasonable assurance that the specified objectives are achieved. The three categories of objectives are operations, reporting, and compliance."

Page 10, Section OV1.02: "Operations objectives relate to the effectiveness and efficiency of an entity’s operations." This directly links internal control to gaining efficiencies.

2. Office of Management and Budget (OMB). (2016). Circular No. A-123, Management's Responsibility for Enterprise Risk Management and Internal Control.

Page 2, Section I, Purpose: "This Circular provides guidance to Federal managers on improving the accountability and effectiveness of Federal programs and operations by establishing, assessing, correcting, and reporting on internal control." This statement explicitly ties the assessment of internal control to improving program effectiveness, which includes efficiency.