We have a weak internal audit system