“Internal controls” are financial management practices that are systematically used to prevent misuse and misappropriation of assets, such as occur through theft or embezzlement. Internal controls are generally described in written policies that set forth the procedures that the nonprofit will follow, as well as who is responsible. The goal of internal controls is to create business practices that serve as “checks and balances” on staff (and sometimes board members) and/or outside vendors, in order to reduce the risk of misappropriation of funds/assets.