The internal controls evaluation process takes place once a year, taking into account both the occasional existence of risks associated with the preparation and disclosure of financial state ments, and possible significant changes to infor mation technology processes and systems.