Conduct regular internal control and risk assessment of existing business system processes or IT systems, and carry out risk assessment before the release or launch of new systems, processes and mechanisms to ensure ”compliance on release”.