Question 1 Yes it is good practice and a legal requirement. For Question 2 decisions should not normally be made between formal meetings, unless the Standing Orders delegate it to somebody specific. Question 3 depends on how thoroughly the Internal Auditor does their job. Some might check a certain selection of payments and if they comply, assume all will comply. Certain councils might append a list of all transactions to the agenda and minutes and the council could resolve to block approve them all, in which case the IA will claim they have an audit trail for an entire months worth