The engagement supervisor should encourage the auditor to improve communication skills. Effective communication is essential for internal auditors, especially in ensuring that process owners have the opportunity to respond to and clarify any issues raised in the draft audit report. This collaboration helps ensure that the audit findings are accurate and that any misunderstandings or errors are resolved before the report is finalized. Encouraging better communication also helps build a positive relationship between the audit function and the audit clients.
The IIA Standards: Standard 2420 - Quality of Communications: " Communications must be accurate, objective, clear, concise, constructive, complete, and timely. " IIA Practice Guide: " Effective Communication for Internal Auditors " : Emphasizes the importance of clear and effective communication in the audit process, including involving audit clients in the review of draft reports.

When an internal auditor identifies a weakness in the control environment relating to the delegation of authority and responsibility, the first action should be to evaluate the potential impact on related controls. This evaluation helps the auditor understand how the identified weakness might affect other control processes within the organization. By assessing the impact, the auditor can gather the necessary information to determine the significance of the weakness and develop a more informed recommendation for addressing the issue.
The IIA Standards: Standard 2210 - Engagement Objectives: " Internal auditors must consider the probability of significant errors, fraud, noncompliance, and other exposures when developing the engagement objectives.
"
COSO Framework: Emphasizes the need for evaluating the impact of weaknesses in the control environment on related controls.

Due professional care was not exercised because the residual risk from the possibility of authorized users sharing their passwords was not considered. Identifying and assessing risks associated with shared access and improper handling of credentials is crucial in a risk assessment. The failure to consider such risks indicates a lack of thoroughness in the auditor ' s evaluation of control effectiveness.
IIA Standard 1300: Quality Assurance and Improvement Program

The core competency displayed by the senior auditor is critical thinking. This competency is demonstrated by her ability to identify a limitation in the current audit procedures and then effectively resolve the issue by using a new tool recommended by a colleague. Critical thinking involves the analysis and evaluation of an issue to form a judgment, which is crucial in adapting audit techniques to meet the demands of complex engagements.
IIA ' s Global Internal Audit Competency Framework

The proper drafting and approval of the internal audit charter by the appropriate parties (e.g., the board or audit committee) offer the clearest evidence that the internal audit activity has achieved organizational independence. The internal audit charter formally defines the purpose, authority, and responsibility of the internal audit activity, including its independence from management and its direct reporting line to the board or audit committee. This document is foundational for establishing and maintaining the independence of the internal audit function.
IIA Standard 1000: Purpose, Authority, and Responsibility
IIA Standard 1110: Organizational Independence