In other cases, either the legal department, the compliance department, or the external auditors, may be the most appropriate resource. Those functions or processes most appropriately addressed by the IAD are entered into the internal audit plan. That plan is reviewed with senior and business unit management and must be approved by the audit committee.