Evaluation of the effectiveness of internal control over financial reporting