The Audit Committee remains ultimately responsible for the IAF regardless of whether internal audit activities are outsourced.