Internal control and all transactions and other significant events need to be clearly documented, and the documentation should be readily available for examination.
Best practices dictate that clear documentation is kept regarding control, transactions, and significant events, if only as a liability shield in the case of audit or investigation.