ries of fraudulent activities, the major financial scandals of recent years also underlined the inadequacy of traditional internal control systems, overly concen trated on monitoring activities and not paying sufficient attention to the rela tionship between governance and risk management, a component that was only afforded a marginal role.