Internal audit routinely reviews compliance risk and also should be reviewing business risk. The efforts to control both risk types will purely enhance: