A sound internal control system and effective risk management are critical elements for achieving IMSS's objectives and safeguarding integrity in its procurement processes. This chapter explores the strengths and opportunities for improving the strategies that drive IMSS's internal control and risk management activities. In particular, IMSS could clarify its risk management objectives for procurement, including sharpening the focus on fraud and corruption risks. The chapter also highlights how IMSS and internal control bodies could improve tools and clarify roles for managing risks in procurement processes. Priorities include making improvements to its risk assessment processes and increasing management ownership of the internal control system.