Design of an Internal Control System Evaluation Instrument Based on the COSO Framework: A Study of State Owned Insurance