Linking BCM measures to the internal control system