internal audit framework in a mining industry