The risk-based group audit plan ensures that all our businesses, in all the countries in which we operate – including those in small and remote locations – receive at least one visit during a three-year period.