https://th.ketajaman.com/post/what-is-the-objective-of-the-internal-control-risk-assessment