Management is responsible for maintaining an adequate system of internal control. Internal auditors independently evaluate the adequacy of the existing internal control systems by analyzing and testing controls. The Internal Audit Department makes recommendations, based on their review, to management to improve controls.