When agencies can customize their internal controls, it has been found that it becomes a lot easier for agencies to respond to external factors.
Furthermore, an agency's internal control should be flexible to allow agencies to tailor control activities to fit their special needs.