medicine cpa internal controls external automated prescription aed medical pharmacy internal controls specialist doctor internal auditor audit physician internal control procedures accounting