POL-FIN-ICS-024: Internal control policy