The Control activities exercised by the Authority over Regulated Entities shall include the following:

1. Finance Control

The Authority shall exercise financial control over all operations of the Regulated Entities with the aim of confirming their suitability, correctness of calculations and legitimacy in accordance with the Authority work methodology and its applicable framework through the following:

   A. Audit the consolidated final accounts of the Union Government, expressing an opinion thereon, and issuing a report containing the results of the Audit work.

   B. Audit the separate and consolidated annual financial statements of the Regulated Entities, taking into account the Laws of the Regulated Entities.

   C. Examine the annual, interim, separate and consolidated financial statements of Regulated Entities whose laws require that their financial statements be Audited by an Auditor, and examining the working papers and reports of their Auditors to confirm that the financial statements fairly express the financial position and performance of the Entity and the quality of the Audit work carried out by them in accordance with the approved Audit standards that it determines, and submit reports thereon.

   D. Examine the financial operations carried out by the Regulated Entities through the exercise of all their activities and work.

   E. Examine the data, documents and records of all accounts of the Regulated Entities to ensure that they are managed in accordance with the approved control systems.

   F. Confirm the accuracy of the calculation, completeness and collection of public revenues and financial returns that result from the Regulated Entities' provision of their services and the exercise of their various activities, including but not limited to fees, prices, tariffs, fines, sales proceeds, profits, rental allowances, concession allowances, security liquidation and any other revenues.

   G. Confirm that the Regulated Entities spend according to the terms of their approved annual budget and ensure that they are used for the purposes allocated in accordance with the approved authorities and in accordance with the approved control systems.

   H. Review the consolidated final accounts and express a technical opinion concerning it, and issue a report that includes the results of the work of this review, showing the true consolidated financial position, as well as the final accounts of the Regulated Entities in accordance with the Authority work methodology and the framework in force in accordance with the provisions of this Law by Decree.

2. Compliance and Performance Control:

The Authority shall exercise the functions of Compliance and Performance Control over the tasks and activities carried out by the Regulated Entities, with the aim of confirming the extent of the entity compliance with the Laws and Regulations related to its powers and regulating its work, and the efficiency and effectiveness of its operational operations and in accordance with the standards and work methodology of the Authority and the framework in force through the following:

   A. Examine and review procurement processes in Regulated Entities to ensure their correct implementation and approval in accordance with the laws, Regulations and policies regulating them.

   B. Ensure compliance with its approved governance, accounting and accountability regulations and rules.

3. Control over control laws and their efficiency and effectiveness:

The Authority shall exercise its duties in controlling the efficiency and effectiveness of control laws, in coordination with the Competent Authorities in the State when needed, with the aim of confirming the efficiency and effectiveness of these laws in monitoring all operational, financial and electronic activities and information and communication technology systems in the Regulated Entities, in accordance with the Authority work methodology and the applicable framework through the following:

   A. Confirm the availability of control laws that aim to protect Regulated Entities, examine them and their procedures to confirm their effectiveness, identify their deficiencies, and recommend what should be taken to address them.

   B. Evaluate the principles of governance, enterprise risk management, performance management, internal control systems, internal Audit units, and others in Regulated Entities, in accordance with the best recognised international standards and practices, to identify opportunities for improvement and development.

   C. Confirm the efficiency of control procedures related to information systems, applications and software for operational and financial activities, their data, means of communication and networks, and examine databases, as well as the reports issued by them to confirm their efficiency and effectiveness and achieving the objectives of the Regulated Entities concerning the protection and integrity of information, data and Official records relating to them and to the Entities, individuals and those dealing with them.

   D. Confirm that expenses allocated to control systems have been spent for the purposes for which they were allocated, and that disbursement has been made in accordance with the legislation regulating that.

   E. Review the plans and operations of the internal Audit units in the Regulated Entities, the plans for the External Auditors' operations, and the reports issued by them, expressing an opinion on them, and confirming the extent to which the Regulated Entities have implemented the recommendations contained therein.