Reviews risk measurement systems, ensures regulatory compliance, and produces reports for management.