Companies Act 2006: Primary UK legislation governing company operations, corporate governance, and directors' duties. Essential for defining the scope and authority of internal audit functions.
Financial Services and Markets Act 2000: Key legislation for financial services regulation in the UK. Relevant if the organization operates in the financial sector.
Data Protection Act 2018 and UK GDPR: Legislation governing the handling of personal and sensitive data. Critical for defining data access and protection protocols in audit processes.
International Standards for Professional Practice of Internal Auditing: Professional standards issued by the Institute of Internal Auditors (IIA) that provide a framework for internal audit activities.
International Professional Practices Framework (IPPF): Comprehensive guidance framework for internal audit professionals, including mandatory and recommended guidance.
UK Corporate Governance Code: Set of principles and provisions for effective corporate governance, particularly relevant for listed companies.
FCA Requirements: Financial Conduct Authority regulations applicable to financial services firms, defining compliance and audit requirements.
PRA Requirements: Prudential Regulation Authority requirements focusing on financial stability and prudential regulation of financial institutions.
Employment Rights Act 1996: Legislation governing employment rights and responsibilities, relevant for accessing and auditing employee-related information.
Health and Safety at Work Act 1974: Primary legislation for workplace health and safety, important when audit scope includes health and safety compliance.
Common Law Contract Principles: Fundamental principles of English contract law including formation, consideration, and enforcement of contractual obligations.
Confidentiality and IP Laws: Legal framework governing protection of confidential information and intellectual property rights during audit processes.
