The external framework requires good internal control, identi cation, and management of risks and requirements for internal control functions (Risk Control Function, Compliance Function, Engineering Assurance and Internal Audit Function).