Question: what is the difference between risk management and internal control?
Answer: Internal control on a regular frequency takes management representation and perform control testing. The risk management function, now seek the information from the process owner about the key risk and the adequacy of the controls in the process to mitigate those risks.