This discussion clarifies the distinctions between Internal Control over Financial Reporting (ICFR) and the Risk Control Matrix (RCM). It explains that ICFR focuses specifically on the controls related to financial reporting processes. The RCM, on the other hand, is a broader tool used to identify, assess, and manage risks across an organisation, often documenting controls in relation to those risks.