The cost and benefits of an internal audit