Specifically, all organizational structures, within their sphere of responsibility, are responsible for preparing adequate control and monitoring systems to allow for an effective risk management process.