4.4. Internal controls and the independent control function