What are two examples of strong and weak internal controls in organizations where you have worked or have first-hand knowledge? How are these different?