Title: A formalization of internal control evaluation