Recommendations on internal control