Basic norms for internal control (May 2026)