der to guarantee the correct undertaking of operations; > “second level” controls, which are entrusted to spe cific corporate departments and which aim to manage and monitor typical categories of risks; > internal audit (“third level” controls) aims at verifying the structure and function of the system overall, also through monitoring the controls, as well as the second level control work.