The in­ ternal audit, which is audited by an external company, is tasked by the Board of Directors with reviewing the efficiency and fitness for purpose of the risk manage­ ment framework and the operations’ risk management work.