Weaknesses and improvements in internal control procedures