The RMS is based on a Policy that: identifies diverse risk categories, details the basic principles and guidelines for action that must be observed in risk management and control, specifies the bodies in charge of ensuring that the internal control and risk management systems function correctly, defines their roles and responsibilities, and that establishes the level of risk deemed acceptable.