Internal control is the process designed, implemented, and maintained by those charged with governance, management, and other personnel to provide reasonable assurance as to the achievement of an entity's objectives regarding the credibility of financial reporting, the efficiency and effectiveness of operations, and compliance with laws and regulations. The applicable regulations to identify and evaluate the risks of significant distortion by understanding the entity and its environment. In this research, we will highlight the elements of a risk-based internal control system that will bring benefits to an entity: efficiency and effectiveness of operations, the credibility of financial reporting, compliance with applicable legislation and regulations.