Strong systems of internal control provide reasonable assurance that programs are operating as intended and are achieving expected outcomes .
Weak systems of internal control provide reasonable assurance .