UNDERSTANDING INTERNAL CONTROL AND MAKING IT PAY