why internal control is important for a company