Furthermore, an agency's internal control should be flexible to allow agencies to tailor control activities to fit their special needs.
Flexibility in an agency's internal controls is recommended here.