The analysis showed that, with respect to the risks generated and suffered with reference to the topics envisaged by Decree are adequately managed through a Governance structure (policies, procedures and segregation of duties) and specific controls aimed at guaranteeing constant monitoring.