Below the Audit Committee, the bank must set up an internal audit function, which reports directly to the Audit Committee (with a parallel reporting line to senior management for day-to-day matters as appropriate).