Implementation of internal control system, based on risk management. Preparation of annual plan and evaluation of controls (effectiveness / efficiency)