The internal Shari'a audit function must be governed by a policy and procedures manual prepared by the management, vetted by the SSB and then approved by the board of directors.