An Authorised Person must document the organisation, responsibilities and procedures of the internal audit function.