Roles inside a company
Internal auditor
The function that tests a company's internal controls and reports to the audit committee.
Background
Section 138 of the Companies Act requires prescribed classes of companies, including listed companies, to appoint an internal auditor, who may be an employee or an outside firm.
Scope and powers
Internal audit reviews controls over financial reporting, operations and compliance, and increasingly over ESG data used in the BRSR.
Investor relevance
An internal audit function that reports directly to the audit committee, and covers ESG data, supports the reliability of disclosures.
Related guides
Key glossary terms
Last reviewed: October 2026