internal controls for startups