The information captured as part of the CRMI, combined with detailed knowledge of the risks faced by customers and their relevant controls, helps to formulate both the Compliance Monitoring Programme and activities undertaken by the Risk and Audit areas.