C.4.2.1 Review reports of Internal Audit activities including institutional risk management assessments and management???s follow-up actions, including follow-up on accounting, internal accounting control or auditing complaints received via hotline or other reporting mechanism, and assess the effectiveness of the internal audit function.