What control does management have in an NPO