These programs require regular reviews by senior management and the Board of Directors, in addition to examinations by internal and external auditors, and regulatory agencies who have oversight authority.