Strengthening the internal control environment Workshops, aimed at process documentation including related risk assessment, are to be completed for minimum within every business department (1st Line of Defence).