At the third line of defence is our Internal Audit Function, providing an annual opinion on the effectiveness of our Risk Management process to the Executive Committee, chaired by the Chief Executive Officer, and then to the Board and its Committees.