requiring employees to take vacations is a weakness in the system of internal controls because it does not promote operational efficiency.