Stichworte: internal control procedure designed