Affordable Care Act challenges internal auditors