An independent audit firm shall be assigned to evaluate and review the internal audit systems and prepare a report in this regard (Internal Control Report), which shall be submitted to the Authority per annum. In addition, another auditing firm shall revise and evaluate the internal audit department/office/ unit periodically every three years, provided that both the internal audit committee and the Board of Directors shall be provided with a copy of such report.