Internal audit Regularly reviews the adequacy of internal controls (including financial, operational and compliance controls) and reports to the risk advisory group, risk advisory committee and audit committee.