Describir: Risk policy of internal risk