The internal audit, which is audited by an external company, is tasked by the Board of Directors with reviewing the efficiency and fitness for purpose of the risk management framework and the operations’ risk management work.