Title: Information assurance and internal control for management decision making