operating and adequate, both on an ongoing basis and in relation to specific needs and to provide assessments and recommendations to promote efficiency and effectiveness; ii) providing specialist support concerning the internal control and risk management system to management, in order to improve the effectiveness, efficiency and integration of the controls in the business processes and to promote the constant improvement of governance and risk management.