By transforming into an audit system based on risks, it was possible to identify, recognize, manage and improve the risk factors on risks that might occur throughout the whole process of high risk duties.