In essence, internal audit is the final line of defense evaluating the effectiveness of, among other things, regular fraud-related communications to employees; fraud prevention, deterrence and detection measures; reporting and investigative processes; and the retribution mechanisms enforcing established policies