Describe the control(s) that the business should have installed to prevent that inappropriate investment. (Controls may include procedures, processes, approvals, checks, reviews, and corresponding documentation that relates to the proposal, approval, and subsequent monitoring of investments.)