226. The Board must ensure that there is a continuous and effective risk and results -based internal audit. 227. The internal audit unit should – (a) evaluate the company’s governance processes; (b) conduct an objective assessment of the effectiveness of risk management processes and the internal control framework; (c) systematically analyze and evaluate business processes […]