The internal control and risk management system covers three types of activity: > “line control” (or “first level” control), consisting of the set of control activities the single operating units or Group companies perform on their own processes.