the policy that shouldn't been included for company's internal control is: Monthly bank statements should be sent to and reconciled by the same employees who authorize payments and write checks.
Bank statements should always be handled by A DIFFERENT EMPLOYEES from the one that handles payment and writes checks. If two of them handled by one person, we shouldn't be able to detect if that employee is conducting a fraud