The internal audit function must be independent and have sufficient authority and resources. In particular, stablecoin issuers must ensure that the qualification of the internal audit staff members and the internal audit resources, in particular its auditing tools and risk analysis methods, are adequate for the nature, scale and complexity of the risks associated with the licensed stablecoin issuer’s business model, activities, and risk appetite.