Strengthening the internal control environment Workshops, aimed at process documentation including related risk assessment, are to be completed for minimum one essential process within every business department (1st Line of Defence).