Which of the following actions best demonstrates an internal auditor exercising due professional care?
An internal auditor is finalizing an audit report on the effectiveness of the organization's overall system of internal control. Several audit tests were performed, and the only issue identified was that the CEO frequently asks employees to make exceptions or bypass the organization's standard written policies and procedures. Which of the following conclusions is most appropriate for the auditor to report?
Who is held responsible for oversight of the organization's risk management framework?
According to IIA guidance which of the following statements regarding ethics is true?