Episurf Medical has established a control environment consisting of an organization with defined lines of communication, authority and responsibility. This is guided by policy documents such as the Board’s rules, instructions to the CEO, risk management policies, the Company’s information systems, the authorization orders and other guidelines and instructions. These are reviewed annually.