Each business unit retains first-line responsibility for identifying and managing risk within its business processes, maintaining a strong control environment, and designing procedures to meet regulatory compliance requirements.