(11)To ensure that a management company has an adequate control mechanism, a permanent compliance function and an internal audit function are necessary. The compliance function should be designed in such a way as to ensure that it may detect any risk of failure by the management company to comply with its obligations under Directive 2009/65/EC. The audit function should aim at verifying and evaluating the different control procedures and administrative arrangements the management company has put in place.