Internal audit function controlled function CF15 in the table of controlled functions, described more fully in SUP 10.8.6 R. 5