basic standard of internal control