Which of the following would be the best choice for a continuing professional development requirement for a newly created internal audit activity?
Who is responsible for setting the risk appetite?
During a review of employee benefits, a staff internal auditor observed an ambiguity in the incentive compensation policy. If reported, it could negatively impact the internal auditor ' s compensation. Which of the following would encourage the internal auditor to be objective in his work?
An internal audit team was assigned to review the organization ' s information security protocol. After fieldwork was completed, an internal auditor identified an error in the review of security access. The error could affect the overall results of the engagement. Which of the following is the most appropriate course of action for the internal auditor?