The key task of the Internal Control System, in addition to covering any procedural and/or operational risks, is that of ensuring that the risk control measures also are actually carried out by the risk owners.