IRM also independently assesses and challenges the impact of the strategic plan on risk capacity, risk appetite, and risk management effectiveness at the line of business, enterprise function, and aggregate company level .