A publicly traded company's board of directors wants to establish a group that provides independent oversight of the organization's internal controls, financial reporting integrity, and the results of internal audits. This group must operate separately from day-to-day management to avoid conflicts of interest. Which governance structure best meets this requirement?