The internal audit department comprises corporate audit, corporate technical audit, corporate technical investigations and forensic and anti-corruption. They provide independent, objective assurance, consulting and forensic services that add value to and improve Eskom’s operations such as plant technical condition, personnel safety and health, environmental issues and investigations of all major events on all Eskom plant. The department brings a systematic, disciplined approach to the evaluation and improvement of the effectiveness of risk management, control and governance processes.

• provide a regular assessment of the adequacy and effectiveness of the organisation’s corporate governance, risk and control processes;
• report significant issues, including potential improvements, relating to corporate governance, risk and control processes;
• periodically provide information on the status and results of the annual audit plan and the sufficiency of the department resources; and
• co-ordinate with and provide oversight of other control and monitoring functions.

The activities and practices in internal audit are conducted in accordance with recognised professional standards. Independent reviews of such compliance are carried out periodically.

Internal audit uses a risk-based audit approach. The audit plan is based on risk assessments and other considerations, such as the achievement of organisational business objectives. The audit plan is updated as required to reflect significant changes in Eskom’s risk profile resulting from changes in the business operations, customer needs or regulatory requirements. The general manager of internal audit attends the exco meetings.

Internal audit is supported by the board and audit and risk committee and is authorised by its charter to have unrestricted access to all functions, records, property and personnel.

External auditors independently audit and report on the financial statements.