We categorize these actions into the five components of internal control-control environment, risk assessment, control activities, information and communications, and monitoring-outlined in the Comptroller General's Standards for Internal Control in the Federal Government (GAO-AIMD-00-21.