the Risk Management department systematically communicates the results of the assessment and monitoring of business risks to the Internal Audit department, which then performs the consequent assessments to plan its control activities.