In the area of information systems, evaluation audits were carried out on risks in access, communications and information integrity, while at the same time promoting the updating of the conclusions reached the previous year regarding the general controls for information systems, especially with regard to disaster recovery.