Using Graphical Representations of Business Processes in Evaluating Internal Control · Study