Regulators in an emerging market are in the process of establishing standards to clearly define the appropriate risk management responsibilities across different roles within the banking sector of the country. A regulatory analyst has been assigned the task of creating a report that recommends best practices for the bank’s comprehensive risk management, audit, and operational functions. In doing so, what would be a suitable responsibility for the audit function according to the analyst's recommendations?