Monitoring the performance of, and continuously improving the effectiveness of, risk management systems and internal compliance and controls, including an ongoing assessment of the effectiveness of risk management and internal compliance and control.