How to test internal control and integrity in computerized systems