The scope and breadth of the activities of the compliance function must be subject to periodic review by the internal audit function.