Risk Management and Internal Control Plan