The objective of this paper is to present the role and importance of internal control systems in good risk management practice, with a particular emphasis on the internal audit and compliance functions within such a framwork. Our focus is on the Life and Health Insurance industry in Canada.