The chief executive officer, risk management officer, and compliance officer are required to certify to the board that internal control and risk management systems are operating efficiently and effectively throughout the group.