identification and assessment of the risks applicable to financial reporting; identification of controls for risks identified both at entity level and pro cess level; evaluation of controls and manage ment of the monitoring process in terms both of design and of opera tions and effectiveness, with the aim of reducing risks to a level consid ered “acceptable” (information flows, management of “gaps”, remedial ac tion plans, reporting system, etc.).