RIO TINTO LTD

GIA provides independent and objective

assurance of the adequacy and

effectiveness of risk management and

internal control systems. It may also

recommend improvements.

While the Head of GIA reports

administratively to the Chief Financial Officer,

appointment to, or removal from, this role

requires the consent of the Audit & Risk

Committee Chair. The Head of GIA is

accountable to the Chairs of the Audit & Risk

and the Sustainability Committees,

and communicates regularly with both.

Our GIA team therefore operates

independently of management. Its mandate is

set out in a written charter, approved by the

Audit & Risk Committee. GIA uses a formal

internal audit methodology that is consistent

with the Institute of Internal Auditors’ (IIA)

internationally recognised standards.

When needed, the team brings in external

partners to help achieve its goals. There is a

clear policy to address any conflicts of

interest, which complies with the IIA’s

standards on independence. This policy

identifies a list of services that need prior

approval from the Head of GIA.