The internal Shari'a audit function must be governed by a policy and procedures manual prepared by the management in consultation by SSB. The policy must be approved by the board of directors while the procedures must be approved by senior management.