Internal systems and processes Manage risks and opportunities Progress continues to be made in establishing a common approach to risk management with the identification of critical controls and monitoring of their effectiveness.