Integrated Risk and Control Framework