rmas_controls_self_assessment_2017.pdf