The internal audit function should be independent of the senior management, reporting to the Audit committee.