Describir: Audit of the risk management system in order to increase its effectiveness