Designing internal controls for a small business or organization is a difficult task for management and/or the board to undertake.