First, each operating company undertakes monthly and quarterly procedures and day-to-day management activities to review their operations and business risks, supported by Group policies, training and SOX and reviews within their network.