Internal control systems focused on mitigating corruption risks rely on both formal and informal practices. Corruption is very much a real-world phenomenon and won’t be solved by formal rules alone…