Verification of efficiency and effectiveness of the Internal Control and Risk Management System