Internal controls have been defined at operating entity level (the firm Rules - comprising all mandatory standards and procedures) and at process level (Process and Control Standards) for key processes, including financial reporting, IT and Tax.