Code of conduct, internal control and risk management system The Internal control and risk management system is a set of rules, procedures and organizational structures to identify, measure, manage and monitor the main risks.