It must also inform the units concerned about risks that may arise in the operations as a result of inadequate compliance, assist in identifying and assessing such risks and assist in drafting internal regulations.