The internal validation procedures to be carried out by the internal auditor are set out in Section CA-14.3. As stated in that Section, the internal auditor's review of the overall risk management process must take place at regular intervals (not less than once every six months). The internal auditor must make a report to senior management and the board of directors, in writing, of the results of the validation procedures. The report must be made available to the CBB for its review.