appropriate internal control procedures