It is likely that assurance will come from different sources.
Of these, assurance from management is fundamental.
This should be complemented by the provision of objective assurance, for which the internal audit activity is a key source. Other sources include external auditors and independent specialist reviews. Internal auditors will normally provide assurances on three areas: