The committee forms three layers of defense mechanism: the first is the frontline operational and management units of each subsidiary; the second is the risk management unit, which assists in policy planning, evaluation and supervision; the third is the auditing unit, which examines the status of regulation and mechanism compliance.