premise: Furthermore, an agency's internal control should be flexible to allow agencies to tailor control activities to fit their special needs.
hypothesis: The internal controls of an agency should have very little to do with flexibility.