> lack of internal controls that safeguard the organization

That's a bit like:

"The bank robbers' mistake was a lack of internal control and security advisors who could have safeguarded them from robbing banks"