The conventional bank licensee must set up an internal audit function, which reports directly to the Audit Committee and administratively to the CEO.