Ensure that controls are sufficiently well designed and operating effectively to keep the risks that they mitigate within tolerance level.