What role, in approving the design of the programme, has a focus on compliance with corporate controls?