The first line of defence annually checks adherence to the internal control principles by answering questions put to them by the Group function for Operational Risk Management in a so called Internal Control Check List.