It employs a systematic and disciplined approach to evaluate and improve the organisation’s governance and risk management process including reliability of information, compliance with laws, regulations and procedures, and efficient and effective use of resources.