HC-3.3.4 [versions up to January 2011]
Internal audit functions must have terms of reference that clearly indicate:
(a) The scope and frequency of audits;
(b) Reporting lines; and
(c) The review and approval process applied to audits.
Amended: January 2007