Provides risk management and assesses the efficacy of a company's internal controls, corporate governance, and accounting procedures.