The internal audit activity will govern itself by adherence to The Institute of Internal Auditors' (IIA) (mandatory guidance including the Definition of Internal Auditing, the Code of Ethics, and the International Standards for the Professional Practice of Internal Auditing (Standards).

The Institute of Internal Auditors' Practice Advisories, Practice Guides, and Position Papers will also be adhered to as applicable to guide operations.

The internal audit activity, with strict accountability for confidentiality and safeguarding records and information, is authorised full, free, and unrestricted access to all of CPUT’s records, physical properties, and personnel pertinent to carrying out any engagement.

All employees are requested to assist the internal audit activity in fulfilling its roles and responsibilities. The internal audit activity will also have free and unrestricted access to the Council.

The Internal Audit Director reports functionally to AROC (Audit and Risk Oversight Committee) and administratively (i.e. day to day operations) to the Vice-Chancellor to maintain objectivity and independence.

• Internal Control reviews, is a process, effected by an entity's board of directors, management and other personnel, designed to provide reasonable assurance regarding the achievement of objectives.
• Compliance audit, is a comprehensive review of an organization's adherence to regulatory guidelines. Independent accounting, security or IT consultants evaluate the strength and thoroughness of compliance preparations.
• Financial Audit, is an independent, objective evaluation of an organization's financial reports and financial reporting processes. The primary purpose for financial audits is to give regulators, investors, directors, and manager’s reasonable assurance that financial statements are accurate and complete.
• IT Audit, is the examination and evaluation of an organization's information technology infrastructure, policies and operations. Information technology audits determine whether IT controls protect corporate assets, ensure data integrity and are aligned with the business's overall goals.
• Performance audits, refers to an independent examination of a program, function, operation or the   management systems and procedures of a governmental or non-profit entity to assess whether the entity is achieving economy, efficiency and effectiveness in the employment of available resources.