The board of directors, its audit committee and senior management must promote a strong internal control environment supported and assessed by a sound internal audit function.