Internal audit

(1) Insurance undertakings must have an effective internal audit function that reviews the entire business organisation, and in particular the internal control system, for its appropriateness and effectiveness.
(2) Internal audit must be objective and independent of other operational activities. It reports its audit findings and recommendations directly to the management board. The management board decides which measures are to be taken on the basis of the findings of the audit reports and ensures the implementation of those measures.