Third level: entrusted to the Internal audit and risk & Compliance departments, its purpose is to identify anomalous trends, violations of the procedures and regulations, and to assess the functionality of the overall internal control and risk management system.