third-level control: consisting of internal audit controls, carried out by the Internal Audit Department, which periodically assesses the completeness, adequacy, functionality (in terms of efficiency and efficacy) and reliability of the organisational structure of other internal control system components.