By continuously scanning the internal environment and reporting findings to leadership and the Board on a regular basis, we can monitor and mitigate operational risks in qualitative areas such as culture, reputation, compliance with laws, regulations, and policies, and decision-making incentives.