You have been asked to consult with a small computer repair shop that is always busy, showing a profit, but cash-poor. What is the first component of internal control structure that you would assess?