internal controls for safeguarding assets and ensuring compliance