Furthermore, an agency's internal control should be flexible to allow agencies to tailor control activities to fit their special needs.
The internal controls of an agency should have very little to do with flexibility.