Of its conclusions on the process that the adequate structuring of an internal control system must carry out, answering the following questions:

1. What comes first, to prepare financial administrative manuals, regulations, policies and procedures or the identification and evaluation of the risk that allows having a plan to mitigate them?

2. How to classify the risks identified by impact or relevance and probability of occurrence?