1. Insurance and reinsurance undertakings shall provide for an effective internal audit function.

The internal audit function shall include an evaluation of the adequacy and effectiveness of the internal control system and other elements of the system of governance.

2. The internal audit function shall be objective and independent from the operational functions.

3. Any findings and recommendations of the internal audit shall be reported to the administrative, management or supervisory body which shall determine what actions are to be taken with respect to each of the internal audit findings and recommendations and shall ensure that those actions are carried out.