Statement on Risk Management and Internal Control