Internal control remediation plan