Statement on Risk Mgmt and Internal Control