Pursuant to the Founding Document and Constitution of the New Independence Party, and recognising that independent oversight and risk-based audit are essential to protect legitimacy and resources and improve results, these Regulations govern governance arrangements, controls, examination, reporting, follow-up and performance measurement; ensure auditors\u2019 access and independence and the rights of audited bodies; and prohibit interference, retaliation and merely formal closure of findings.<\/p>\n
These Regulations shall be known as the Internal Oversight, Audit and Institutional Performance Monitoring Regulations of the New Independence Party, 2026, and shall enter into force upon approval.<\/p>\n
These Regulations apply to all Party bodies, branches, offices, programmes, resources, systems, employees, volunteers and entities performing work in its name.<\/p>\n
These Regulations shall be read with the Constitution and the financial, meetings, human resources, data and legal affairs regulations. Applicable law and the Constitution prevail in the event of conflict.<\/p>\n
Oversight means the system of direction, prevention and detection; audit means independent, evidence-based examination; performance means the extent to which results are achieved; and recommendation means action to remedy a deficiency or improve effectiveness.<\/p>\n
The objectives are to safeguard resources, reinforce legitimacy and integrity, verify operational efficiency and information accuracy, and monitor results, corrective action and institutional learning.<\/p>\n
The principles are independence, objectivity, competence, confidentiality, professionalism, proportionality, evidence, non-retaliation, fairness, the right of reply and follow-up.<\/p>\n
They approve the overall framework, appoint or approve the supreme oversight body, receive its reports and ensure resources, independence and follow-up of material violations.<\/p>\n
A committee shall be formed with a majority independent of executive functions. It shall approve the charter, plan, reports, appointments and budget and monitor the quality of the audit function.<\/p>\n
The Unit shall perform assurance and advisory engagements and evaluate governance, risks and controls. It shall not manage activities it will audit.<\/p>\n
The Chief Audit Executive shall report functionally to the Oversight Committee and administratively to a designated body, and shall have direct access to the Council in cases of risk or restriction of audit work.<\/p>\n
An audit officer shall not be dismissed, nor their resources, remuneration or scope reduced, in retaliation for findings. Any such decision shall be reasoned and reviewed by the Committee.<\/p>\n
Auditors shall have full and appropriate access to persons, records, systems and premises, respecting privacy, professional confidentiality and the need to avoid unnecessary disruption.<\/p>\n
The charter shall define purpose, authority, independence, scope, access, reporting, quality and responsibilities. It shall be approved and circulated internally as appropriate.<\/p>\n
Auditable units, processes, systems, projects, partnerships, funds and data shall be identified and the inventory updated when changes occur.<\/p>\n
Assessment shall consider impact, likelihood, change, complexity, expenditure, reputation, previous breaches, control strength and stakeholder concerns.<\/p>\n
The plan shall specify engagements, scope, resources, timing, priorities, follow-up work and contingency, and shall align with risks and strategy.<\/p>\n
The plan may be amended for a new risk, legitimate request or resource shortfall. Effects and deferred engagements shall be documented, and material changes approved by the Committee.<\/p>\n
Audit shall coordinate with financial oversight, legal, compliance and external audit functions to avoid duplication and gaps, without uncritical reliance on their work.<\/p>\n
A notice shall state the objective, scope, period, team, timetable and documents. Notice may be delayed to protect evidence or a legitimate investigation.<\/p>\n
The auditor shall understand the process, objectives, risks, controls and data, and determine examination criteria, sampling, tests and work programme.<\/p>\n
Evidence shall be sufficient, appropriate, reliable and traceable. Interviews, observation, analysis, inspection and confirmation shall be used as needed.<\/p>\n
The sampling methodology, reasons and limits of inference shall be stated. An isolated exception shall not be generalised without assessing its scale and nature.<\/p>\n
Procedures, evidence, judgments, findings and review shall be documented and securely retained so that a competent auditor can understand the work.<\/p>\n
The engagement leader shall review planning, evidence and conclusions before reporting. Professional disagreements shall be resolved and documented without suppressing legitimate opinions.<\/p>\n
A finding shall state the criterion, condition, cause, effect, risks and recommendation, distinguishing breaches, weaknesses and opportunities for improvement.<\/p>\n
Findings shall be classified as low, medium, high or critical according to impact, likelihood and extent, with corresponding deadlines and escalation.<\/p>\n
Findings shall be presented to the audited body to verify facts, hear its response and agree action, without granting it the power to delete a valid finding.<\/p>\n
The draft shall include scope, methodology, limitations, conclusion, findings, responses, action plan, responsible persons and deadlines.<\/p>\n
The final report shall be issued promptly to relevant persons and the Oversight Committee, clearly identifying unresolved disagreements, limitations and their effects.<\/p>\n
A critical breach, loss or risk shall be escalated immediately without awaiting completion of the engagement, while preserving evidence and taking lawful interim protective measures.<\/p>\n
The responsible person shall specify the action, owner, resources, deadline and evidence of closure. Audit shall assess adequacy without managing implementation.<\/p>\n
A register shall record findings, severity, action, owner, deadline, status, evidence, delays and risk acceptance.<\/p>\n
A recommendation shall not be closed merely on assertion. The auditor shall examine evidence, effectiveness and sustainability of remediation and may reopen it.<\/p>\n
Delays shall be justified, with revised deadlines and interim controls. Repeated or unacceptable delays shall be escalated to management and the Committee.<\/p>\n
Only an authorised person may accept the risk of non-implementation after considering consequences, alternatives and duration. Audit and the Committee shall be informed of high risks.<\/p>\n
The report shall show completed, overdue and reopened actions, accepted risks and trends, without rewarding nominal closure or shifting responsibility.<\/p>\n
Audit shall examine income, expenditure, accounts, assets, reconciliations, reports, approvals and segregation of duties in accordance with the financial regulations.<\/p>\n
Audit shall examine need, competition, due diligence, approval, price, receipt, payment, conflicts, amendments and termination.<\/p>\n
Audit shall verify existence, entitlement, approval, attendance, deductions and confidentiality. Personal information shall not be disclosed beyond necessity.<\/p>\n
Audit shall examine registers, custody, stocktaking, use, insurance, transfers, write-offs and disposal, including periodic physical verification.<\/p>\n
Audit shall reflect each branch's size and risks and examine membership, finances, decisions, records and compliance without becoming an instrument of administrative control.<\/p>\n
Audit shall verify sources, conditions, use, reporting, independence and legal restrictions, and escalate unidentified or politically directed funding.<\/p>\n
Audit shall examine allocation of powers, quorum, delegation, conflicts of interest, information quality, implementation of decisions and accountability.<\/p>\n
Audit shall examine controls, records, neutrality, secrecy and complaints without interfering with voter choice or recounting votes outside its mandate.<\/p>\n
Audit shall verify registration, licences, notifications, deadlines, policies, training and remediation in coordination with the legal function.<\/p>\n
Audit shall examine reporting channels, protection, investigations, sanctions, gifts and conflicts while respecting parties' rights and case confidentiality.<\/p>\n
Audit shall examine approvals, objectives, financial and data obligations, reputation, independence, monitoring and termination.<\/p>\n
Audit shall assess the effect of controls and decisions on equality, privacy, freedom of opinion and non-retaliation, and report discriminatory or arbitrary patterns.<\/p>\n
Audit shall examine ownership, permissions, change, vendors, continuity, budgets and alignment of technology with Party objectives.<\/p>\n
Audit shall verify least privilege, segregation, periodic review, account deactivation, multifactor authentication and privileged accounts.<\/p>\n
Audit shall examine classification, encryption, updates, backups, incidents, awareness and testing without creating new risks during examination.<\/p>\n
Audit shall verify purpose, minimisation, accuracy, rights, retention, sharing, transfers and destruction, using test or masked data where possible.<\/p>\n
Audit shall examine sources, accuracy, bias, transparency, human review, confidentiality and intellectual property rights. Automated output shall not be relied upon as sole evidence.<\/p>\n
Audit shall test backup, restoration, alternatives, recovery-time objectives and emergency communication, and document findings and remediation plans.<\/p>\n
The framework shall link strategy to objectives, outcomes, indicators, targets, owners and resources, distinguishing impact from activity.<\/p>\n
An indicator shall be specific, measurable, relevant and time-bound, with a source, owner, baseline and documented calculation method.<\/p>\n
Completeness, accuracy, timeliness, consistency and verifiability shall be reviewed. Definitions or periods shall not be altered merely to improve reported results.<\/p>\n
The dashboard shall show trends, gaps, explanations, actions and risks. Complex political or social performance shall not be reduced to a single figure.<\/p>\n
Periodic reviews with responsible persons shall discuss results, obstacles, resources and corrective measures, with decisions and follow-up documented.<\/p>\n
Evaluation shall examine relevance, economy, efficiency, effectiveness, sustainability and unintended effects, including beneficiaries' views where appropriate.<\/p>\n
Audit shall refer indicators of fraud or corruption to the competent body, preserve evidence and not extend an investigation beyond its mandate.<\/p>\n
Concealing records, influencing witnesses, obstructing access and retaliation are prohibited. Restrictions shall be reported immediately to the Oversight Committee.<\/p>\n
The assessment shall consider credibility, risk, conflicts and the need for protection, lawful suspension or referral, without prejudgment or public defamation.<\/p>\n
An investigation shall proceed under written authority with an independent team, hearing rights, confidentiality and chain of custody, with legal coordination when necessary.<\/p>\n
Losses, benefits and responsibility shall be documented and fair, lawful recovery pursued without settlements concealing corruption.<\/p>\n
Reporting shall comply with law and jurisdiction following appropriate advice. A reporting duty shall not be delayed to protect an office or reputation.<\/p>\n
Qualifications and experience shall be specified in finance, law, governance, technology and data, together with continuing professional learning and ethical conduct.<\/p>\n
Auditors shall exercise reasonable skill and care and assess fraud, error, materiality and cost, without guaranteeing detection of every breach.<\/p>\n
Auditors shall disclose relationships, previous work or interests and recuse themselves or undergo independent review; they shall not audit an activity they recently managed.<\/p>\n
The programme shall include supervision, internal reviews, satisfaction and value indicators, remediation and periodic independent assessment of audit quality.<\/p>\n
External experts may be engaged subject to competence, independence, confidentiality, cost and authorisation, without transferring the Committee's supervisory responsibility.<\/p>\n
Scope, information and findings shall be coordinated with the external auditor without impairing either party's independence or making unauthorised disclosures.<\/p>\n
The audited body may know the scope, provide information, responses and evidence, state disagreements and complain about conduct, without obstructing lawful access.<\/p>\n
Auditors shall safeguard information obtained and not use it for personal gain or political conflict. Findings shall be shared according to need and classification.<\/p>\n
Retaliation, pressure and unnecessary disclosure of identity are prohibited. Protection shall be monitored and an independent alternative channel provided.<\/p>\n
An independent body shall examine allegations of bias, abuse of authority or disclosure, while protecting independence and hearing rights.<\/p>\n
Proportionate measures shall apply to manipulation, gross negligence, conflicts or disclosure. Auditors shall not be penalised for good-faith professional findings.<\/p>\n
The annual report shall present completed work, coverage, critical findings, follow-up, restrictions, quality, resources and trends to the Council and leadership.<\/p>\n
Forms shall be issued for risk assessment, plans, assignments, working papers, findings, reports, follow-up, risk acceptance and performance indicators.<\/p>\n
The matrix shall specify approval of plans and reports, referrals, access, risk acceptance and external engagement. No person shall approve a finding concerning themselves.<\/p>\n
An adequate independent budget and resources shall be allocated in proportion to risks, and any restriction preventing material coverage and its effects reported.<\/p>\n
Registers, plan, charter and Oversight Committee shall be established within ninety days; outstanding findings shall be reviewed and prioritised.<\/p>\n
These Regulations shall be reviewed every two years or upon material change, and shall undergo specialist legal review for consistency with Sudanese legislation before final approval.<\/p>\n
Earlier rules are repealed to the extent of inconsistency. Valid audit work and recommendations remain effective until completed under these Regulations.<\/p>\n