A discussion about internal controls came up recently which reminded me of some work I had done a few years back. In summary, the problem is that most internal control frameworks are designed for corporate entities and specifically US organizations. How applicable are they to a public sector context?