Contents

1. Executive summary 2
2. Open and delayed trends as at December 31, 2019 3
3. Action plan status by internal audit 4
4. Retargeted management action plans 6
5. Risk Acceptance 19
6. Formal Risk Acceptance 19
7. Implied Short Term Risk Acceptance 19
8. Previously retargeted management plans 24