Assign roles and responsibility for internal controls ()