STANDARDS OF MANAGERIAL INTERNAL CONTROL
Standard 16 – Internal audit
The public entity establishes or has access to a competent audit entity, which has in its structure competent auditors, whose work is generally carried out under programs based on risk assessment.