Structure of the internal control and risk management system (graphic)