This department is responsible for evaluating and improving the effectiveness of risk management, control, and governance processes within the organization.