The Internal Control and Risk Management System attributes to all the corporate departments an adequate position in a system with two organizational levels, i.e. the operational level, whose main organizational interface is the Top Management and which includes controls focusing on the functionality of specific risk management and control areas, and the control level, which has a high degree of organizational independence, and is responsible for assessing the success of the system in terms of controls and risk management.