"If it takes more than six months to do the field work, that's too long. It needs to be timely so management knows what's going on and can fix it," a former employee said. "Internal control weaknesses and stuff like that that could allow some fraud to occur, it could go on for years."