Public sector organisations should ensure that their “lines of defence” against fraud and corruption are strong and based on sound risk management, internal controls, and independent assurance (internal audit) activities. This comprehensive approach allows organisations to pre-emptively tackle potential corruption, detect integrity violations when they occur, continually monitor and improve controls over time, and more swiftly adapt to changing contexts and risks. As such, this chapter focuses on these three key elements in Mexico’s federal public administration. The first section assesses Mexico’s Ministry of Public Administration’s risk management process (the Administración de Riesgos Institutional, or ARI). The second section examines the internal control environment and processes put in place by the federal government and line ministries. The third section highlights the importance of an independent internal audit function for consulting senior management and providing assurance over the effectiveness and efficiency of internal control and risk management arrangements within public organisations.