Not applicable

I would say Risk (Risk Management) and Controls (Policy & Control Management) since they put all pieces together.