An example of poor internal control is

the custodian of an asset should not maintain or have access to the accounting records.

the accountant should not have physical custody of the asset nor access to it.

one person should be responsible for handling related transactions.

a salesperson makes the sale, and a different person ships the goods.