ESTABLISHING AN EFFECTIVE INTERNAL AUDIT FUNCTION