committee, investors, regulators, network firms, other networks, other service providers) Why are they considered relevant parties? For example, - The firm may consider a regulatory authority as a relevant

); • unfamiliar systems and in-house expertise to assess them; • understanding and evaluation of controls on complex systems; and • effect of Internet and e-commerce. 2 How is firm dealing with greater use of