The Internal Audit function is the third line of defence, responsible for providing independent assurance to the Audit & Conduct Review Committee that all significant risks are identified and appropriately reported to the Board Committees and executive officers, and assessing whether these risks are effectively controlled.