Provision of internal audit services

The internal audit function will be required to (i) analyse the governance, risk management and internal control system and establish a risk-based assurance programme; (ii) identify and evaluate the controls which are established to achieve objectives in the most economical, effective and efficient manner; (iii) report findings and conclusions and, where appropriate, make recommendations for improvement; (iv) provide an opinion on the controls under review; and (v) provide assurance based on evaluating the governance, risk management and internal control system within the organisation as a whole. For each year from 1 April to 31 March the following year, the internal audit team will be responsible for proposing a programme of work and submitting it for approval to the ARC that focuses on areas of specific business risk that WICS faces regularly. This focus will include compliance with internal and external WICS regulations, particularly in line with the Scottish Public Finance Manual (SPFM). Annual audit assu