Chapter 13 - Introduction to internal control systems. Chapter 13 introduces the subject of internal control using the 1992 COSO Report which identifies the five components of an internal control system. Next we offer updates and additional guidance that COSO has published since the 1992 Report. We also expand upon the concept of enterprise-wide risk management, which must be considered first to determine what controls are necessary to mitigate the risks that are identified.