internal review activities that include reviewing, preparing, and assessing compliance documentation as well as performing... transactions for testing and review underlying documentation for compliance with policy, including proper and timely approvals...