The document discusses the purpose and functions of an internal audit department. It defines internal auditing as an independent process that evaluates risk management, controls, and governance to improve an organization's operations. An internal audit department is necessary to comply with regulations like SOX, ensure proper financial and risk controls, and review operations for effectiveness and compliance. The department performs several types of audits, including financial, operational, compliance, and special investigations audits. In conclusion, having an internal audit reduces risks for a company through systematic evaluation of controls, operations, and compliance.