Internal control Internal audit Regularly reviews the adequacy of internal controls (including financial, operational and compliance controls) in conjunction with the external auditor and reports to the risk advisory group, risk advisory committee and audit committee.