Office of Management and Budget, Management's Responsibility for Internal Control (OMB Circular No. A-123) (June 1995; revised Dec. 21, 2004) (full-text).