Risk-based performance

Internal control can be judged effective in each of the three categories, respectively, if the board of directors and management have reasonable assurance that:

• They understand the extent to which the entity’s operations objectives are being achieved.
• Published financial statements are being prepared reliably.
• Applicable laws and regulations are being complied with.

This is a state or condition of internal control.

Source : COSO Integrated Internal Controls Framework