Management is responsible for monitoring progress of actions to mitigate key risks and is supported through the Group’s internal audit programme, which evaluates the design and effectiveness of controls to mitigate key risks.