Is it primarily a compliance-focused function? Is the orientation of the audit committee and management towards ensuring compliance to company policies and procedures as well as external regulation?
Is it a broad-based and governance focused function? Is the expectation that internal audit should be reviewing across all areas of the enterprise with a focus of finding key breakdowns and deficiencies in risk management across all categories of risk including financial, commercial, reputation/branding etc.?
Is it expected to find revenue leakages and be involved in loss prevention? A number of internal audit functions are heavily involved in revenue assurance activities, even to the extent of having trained and experienced resources dedicated to this goal.
nction is kept front of mind: