The Audit and Risk Management Department is also responsible for assessing the maturity level of risk management procedures and making recommendations, if necessary, for improving their effectiveness.