internal control banking role