Any system of internal control, no matter how well designed, has inherent limitations, including the possibility that a control can be circumvented or overridden, and misstatements due to error or fraud may occur and not be detected.