oversight on entity level, objectives setting, integrity and core values
oversight on more specific units, first line of defense, tone at the top,
second line of defense
third line of defense