There is evidence of an opportunity for improvement in the risk module. Currently, if the control auditing criteria are modified, it makes the massive change to all the controls backwards, which does not allow traceability in the process, nor does it maintain the integrity of what has already been managed years ago, the improvement would be that if the criteria of the controls are changed by configuration, it will allow us to maintain backward traceability and for this change to be taken as of the new date so that the controls are evaluated now with this change and don't have to do the whole process in bulk. This results in reprocessing, loss of information and information integrity.
·