POCs from [management, everyone in a command, each command must appoint an internal control officer who, or only senior executive service SES and flag/general officers] is responsible for establishing and integrating internal control into its operations in a risk-based and cost beneficial manner, to provide reasonable assurance that the entity's internal control over operations, reporting, and compliance is operating effectively