CGD ensures an appropriate internal control environment through a risk management system, the implementation of the Operational Risk and Internal Control Program (ROCI), an efficient information and communication system, as well as an effective monitoring process, according with the eligibility requirements established by the Bank of Portugal and based on best practices.