13For example, Glass and Lewis (2004) state ‘‘ythe size of the company, quality of its staff, risk management
processes, the type of information technology systems, complexity of product lines including marketing channels,
geographical dispersion, nature of the business (e.g. manufacturing versus service) as well as many other factors
can affect the types of internal control necessary. Most often, small businesses will not require the type of complex
internal control systems that are required of large international conglomerates engaging in extensive risk
management techniques and financial instruments.’’