Internal controls are like seat belts, they only work if you use them! Almost every car in the U.S. has seat belts, yet many traffic injuries and fatalities result from these restraints not being used. States spend millions per year advertising the “Click it or Ticket” campaigns.
The same is true for internal controls. The majority of problems result because the controls are not used or are circumvented. Are your controls used? If not, why not? Onerous, complicated and unused controls are equivalent to no controls. Spend some time and money making your controls both usable and effective, then continually monitor their use. This will save you money in the long run.