The internal control and risk management system (ICRMS) is a series of tools, organisational structures, standards and rules aimed at sound and proper business management in line with the business targets set by the Board of Directors, with an adequate process for the identification, measurement, management and monitoring of main risks, and the structuring of adequate flows of information to ensure its circulation.