The external framework requires good internal control, identification and management of risks and                          requirements for internal control functions (Risk Control Function, Compliance Function and Internal                        Audit Function).