How do you manage the internal control in your work?

In my previous role, I started by reviewing the control evidence, sample test, exception log, and remediation plan. I then worked with the responsible team to confirm control objective, owner, evidence, frequency, reviewer, and exception handling. I documented the result, tracked any remaining risk, and followed up until the internal control met the agreed requirement.