The establishment and maintenance of acceptable business practices and adequate and effective internal controls are the responsibility of management. Managers are responsible for internal control policies and procedures specific to their unit or department. Every employee in the organization plays a part in the internal control system. All personnel are responsible for communicating problems in operations as well as complying with internal and external policies and regulations.
Internal Audit is not responsible for internal controls, but does play a significant role in recommending controls and providing consultation and advice on controls.