They use a risk-based approach to review and evaluate our management procedures, internal control systems, information systems and governance processes to determine if they are adequate, effective and sustainable in verifying data accuracy.