← A NEW RISK MANAGEMENT AND INTERNAL AUDIT FRAMEWORK