Therefore, this definition of Internal Control and Risk Management System has a broader scope; it is not limited to accounting controls and the process of financial and economic reporting; it also covers other important aspects of the business, like the protection of resources, operational efficiency and effectiveness and compliance with laws, regulations and policies of the organization.