The risk that internal controls fail to function effectively, adversely affecting business results, financial position and other matters. This covers company-wide failures of internal controls and is not limited to specific areas such as financial reporting processes, consolidated subsidiaries or a holding company structure.