The importance of robust governance in providing assurance