3 RISK FACTORS AND CONTROL ENVIRONMENT * 3.1 DEFINITION AND OBJECTIVES OF INTERNAL CONTROL 134 3.1.1 Reference work 134 3.1.2 Internal Control objectives 134 3.1.3 Continuous improvement of the Internal Control system 134 3.2 COMPONENTS OF THE INTERNAL CONTROL AND  RISK MANAGEMENT SYSTEM 135 3.2.1 Organisation and environment 135 3.2.2 Control and supervision activities: those involved and their roles 137 3.3 SYSTEMS RELATING TO THE PREPARATION AND PROCESSING OF FINANCIAL AND ACCOUNTING INFORMATION 141 3.3.1 Definition, scope and objectives 141 3.3.2 Monitoring process for the organisation of accounting and finance functions 141 3.3.3 Processes used to prepare accounting and financial information 142 3.3.4 Insurance policy 143 3.4 VIGILANCE PLAN 144 3.4.1 Introduction 144 3.4.2 A continuous improvement process 144 3.4.3 General framework of risk  analysis 144 3.4.4 Applicable rules resulting from the risk analysis 145 3.4.5 Effective application and compliance with the Vigilance Plan 150 3.4.6 Whistleblowing mechanism and reporting system 155 3.4.7 Update on the effective implementation of the Vigilance Plan 155 3.5 RISK FACTORS AND RISK MANAGEMENT 158 3.5.1 Definitions and general framework 158 3.5.2 Risk mapping 158 3.5.3 Risk factors 158 * This information forms an intregral part of the Annual Financial Report as provided in Article L.451-1-2 of the French Monetary and Financial Code. L ’ ORÉAL I UNIVERS AL REGISTRATION DOCUMENT 2021 133