A small business's internal control system can only be as strong as the rules, policies and procedures put in place to detect fraud, waste or abuse and protect its financial and physical assets.