1. Objectively assess a companys IT and Business processes 2. Assess the companys risks and the efficacy of its risk management efforts 3. Ensure that the organization is complying with relevant laws and statutes 4. Identifying shortfalls or gaps in processes 5. Promote ethics and help identify improper conduct 6. Assure safeguards 7. Investigate fraud 8. Communicate the findings and recommendations 9. Provide recommendations to improve weak internal controls 10. Investigate instances of possible fraud(even those considered immaterial) 11. Perform reconciliations of financial and operating information 12. Monitor compliance with industry standards, laws and guidelines 13. Evaluate whether processes and processes and procedures are functioning properly