https://ones.com/ja/blog/knowledge/internal-control-risk-minimization/