However, to complement that, our management process adds two layers of defense that together provide guidance and structure for identifying, assessing, controlling, monitoring and reporting compliance risk.