The aim is to define a systematic approach that is consistent with risk control and management, by creating an effective model with steering, monitoring and representation functions, oriented towards the adequacy of the management processes and their compliance with top management s goals.