In addition to these processes two specific systems are in place: internal control on financial reporting (based on the North American ruling Sarbanes-Oxley) and internal control on system operation (based on ruling SAS 70).