Internal controls and risk management system The System of Internal Controls and Risk Management is the set of rules, procedures and organization structures aimed at identifying, measuring, managing and monitoring the major business risks.