On the cost side, the incremental costs of implementing effective internal controls, relative
to ineffective internal controls, include internal personnel costs and external consulting and
professional advisory service fees (A.R.C. Morgan 2005; Sammer 2005)