evaluate the effectiveness of the risk management control and governance processes as well as the reliability of reporting information and ensuring that policies and standards are respected within the group