An investment management company, determined to strengthen its internal control framework, has recently established an independent risk management unit (RMU). The company's management has assigned an analyst the responsibility of creating a comprehensive summary report that outlines the tasks and responsibilities of this new unit. To ensure the report is thorough, what would be an appropriate activity for the analyst to include when defining the obligations of the RMU?