ABSTRACT
Most organisations would choose to have an internal audit service in view of the reassurance it provides and the HEFCE has made this a mandatory requirement in its audit code of practice. This requirement is linked to the need to provide the governing body, designated officers and other managers of the institution assurance on the adequacy and effectiveness of the internal control system, including risk management and governance.
