The internal controls assessment process is carried out once a year taking into account both the existence of new risks associated with the drawing up and disclosure of financial statements and pos sible significant changes in information technology processes and systems.