The company employs 85 people and generates CHF 18M in revenue. In five years, it has doubled in size. Internal processes — purchasing, treasury, payroll — were built on the fly, without formalization. A fundraising round is planned within the next 12 months. The CFO knows that investors will demand guarantees on risk management. However, he does not have a documented internal control system. No risk matrix. No process mapping.