Internal control and corporate governance