Sample Internal Control Policy