A service enterprise shall include at least the following items in its implementation rules for internal audits:
- Purpose, functions, and responsibilities of the internal audit unit.
- Assessment of the system of internal controls to measure the effectiveness of, and compliance with, the established policies and procedures, and their effects on operational activities.
- A detailed listing of audit items, times, procedures, and methods.