226. The Board must ensure that there is a continuous and effective risk and results -based internal
audit.
227. The internal audit unit should –
(a) evaluate the company’s governance processes;
(b) conduct an objective assessment of the effectiveness of risk management processes and the internal control framework;
(c) systematically analyze and evaluate business processes and associated controls;
(d) assess risks of fraud, corruption, unethical behavior and other irregularities.
228. Internal controls should be established not only over financial matters, but also over operational, compliance and sustainability issues.
229. The Board should ensure that the internal audit activity is sufficiently empowered to perform
its mandate.

• According to the NATIONAL CODE ON CORPORATE GOVERNANCE ZIMBABWE