Of course.
The most important value added by a strong internal audit function is to provide the assurance to management and to stakeholders that proper controls are in place.
The second most important is occurs when we have some weaknesses or some risks to address. That's the reason why every single internal audit report, before it's completed, must have recommendations.
You also have to have a management response. When you look on the web, every given year we have about 200 internal audit reports. All those reports must have the problem that we're trying to correct, the impact, the recommendation, and the management action plan.
This is where we're looking to strengthen this--in the departments' independent audit committees, to make sure that they follow up on the action plans on a timely basis and report on an annual basis on the status of the health of the internal audit and the status of the health of the financial management.