The board of directors lays down guidelines for internal control and business risk management and it periodically checks, with assistance from the internal control committee and the internal auditing function, that this system is working properly.