The authority and responsibilities of each control function must be set out in writing and made part of the Company's governance documentation.
2.
Staff who perform Control Functions must be suitable for their role and meet any applicable professional qualifications and standards. Higher expectations must be placed on the head of each control function.
3.
The head of each control functions must regularly review the adequacy of the function's resources and request adjustments from Senior Management/ Board as necessary.
4.
Each control function must have the authority to communicate on its own initiative with any employee and to have unrestricted access to information in any business unit that it needs to carry out its responsibilities. The control functions must have the right to conduct investigations of possible breaches and to request assistance from specialists from within or outside of the Company.