Internal controls including design and implementation (CAS 315)