In addition, Group Internal Control evaluates possible dysfunctions based on their potential impact (risk) on the financial reporting, external laws and regulations, operating activities or business strategy.