Regulation 3 Responsibility for internal control
A relevant authority must ensure that it has a sound system of internal control which—
(a)
facilitates the effective exercise of its functions and the achievement of its aims and objectives;
(b)
ensures that the financial and operational management of the authority is effective; and
(c)
includes effective arrangements for the management of risk.