Internal Control & Risk management v/Heino Hansen