To improve its internal control environment, SAHPRA has intensified the development and review of policies and standard operating procedures within all business units, with the Quality Management Unit driving the process.

Management is responsible for the development and maintenance of internal controls to fulfil its responsibility in providing reliable financial and operational information, while Internal Audit is responsible for the assurance of internal controls.

SAHPRA has outsourced the internal audit function to manage the capacity constraints while providing assurance on the risk and control environment. Internal audit is expected to conduct amongst others audits on operations, finance, ICT, performance information and any other special assignments and investigations on behalf of the Chief Executive Officer and RAG.