Each state agency shall conduct an annual review of the agency's documented risk and control matrix to assess the adequacy and effectiveness of the agency's internal controls and risk mitigation strategies.
Following the review, each state agency shall submit the results to the Board of Internal Control, including any updates to the agency's risk and control matrix.