Rule 2600 - Internal Control Policy Statements