This should include how responsibility and accountability are devolved and executed at different levels within the business, and the relationship between regular performance monitoring and risk management processes.