1 if the board establishes a formal risk management
system and internal controls in the firm, and if the CEO and the CFO state to the board in writing that the risk management system and internal controls are operating effectively in all material respects