Internal and external control of a public company like NAV Brasil is best described by which statement?

1. The company keeps internal governance and audit bodies and remains subject to external control exercised with the assistance of the Federal Court of Accounts (TCU) and social control, given its public nature and resources
2. As a company with private-law rules, it is entirely outside any public control
3. Only its shareholders' meeting may exercise control, with no external oversight whatsoever
4. External control is performed exclusively by foreign ICAO inspectors