Which of the following descriptions of the internal control system are indicators that risks are managed effectively?

1. Existing controls promote compliance with applicable laws and regulations.

2. The control environment is designed to address all identified risks to the organization.

3. Key controls for significant risks to the organization remain consistent over time.

4. Monitoring systems are in place to alert management to unexpected events.