Enhancing Internal Controls with Routine Self-Assessment