internal controls evaluation steps - Search