The internal validation procedures to be carried out by the internal auditors are set out in Section CA-14.3. As stated in that Section, the internal auditor's review of the overall risk management process should take place at regular intervals (not less than once every six months). The internal auditor shall make a report to senior management and the board of directors, in writing, of the results of the validation procedures. The report shall be made available to the CBB for its review.