Internal control procedures and conflict of interest