The director of internal auditing of a large corporation was asked by the audit committee of a company to provide written advice to their board of directors as to whether the company maintains its records and internal accounting controls to the extent and manner required by the U.S. Foreign Corrupt Practices Act of 1977. What would be an appropriate response?