The group achieves these objectives by applying a systematic, disciplined approach to evaluating and improving the effectiveness of risk management, internal controls, governance and business processes.