DPFEM requires an independent auditor to undertake an internal audit function and provide strategic risk management advice relative to the corporate governance rules identified in the Departments Risk Management Framework. This may include the identification of opportunities to enhance practices.