According to the IIA's mandatory guidance on independence, allowing senior management to have influence over the CAE's salary adjustments could potentially compromise the independence of the internal audit function. The board should independently approve the CAE's salary without seeking senior management's recommendation to maintain the internal audit function's independence.
The Institute of Internal Auditors (IIA) - International Standards for the Professional Practice of Internal Auditing, specifically standards related to independence.

According to the guidance from The IIA (International Professional Practices Framework - IPPF), the most robust support for concluding that an organization's risk management processes are effective is the alignment of selected risk responses with the organization's risk appetite. This indicates that the organization not only understands its risks but also manages them in a manner consistent with its capacity and willingness to accept risk. It reflects a mature risk management process where risks are identified, assessed, and managed in alignment with strategic objectives and risk appetite, ensuring that the organization is not taking on more risk than it can handle or than is acceptable to its stakeholders.
IIA Practice Guide on Assessing the Adequacy of Risk Management Processes.
COSO Enterprise Risk Management Framework.

Assessing whether an organization ' s responses to risk are aligned with its risk appetite effectively can be done by analyzing the results of tests on controls and monitoring procedures implemented by management.
This approach ensures that the measures taken are sufficient and appropriate in relation to the defined risk appetite, thereby providing assurance that the organization manages risks effectively.
Institute of Internal Auditors (IIA) Standards and Guidelines.

Requiring the matching of a purchase order (PO), receiving report, and invoice before payment is a robust control designed to prevent overpayment and other types of fraudulent activities related to vendor payments.
This control ensures that:
* The goods or services invoiced were actually ordered (verified by the purchase order).
* The goods or services were received (verified by the receiving report).
* The invoice amount matches the agreed-upon terms and quantities (verified by the invoice).
This three-way match process helps prevent discrepancies such as overpayments, duplicate payments, or payments for goods/services not received. By ensuring all three documents align, it mitigates the risk of fraud and errors in vendor payments.
The Institute of Internal Auditors (IIA) Standards and Practice Advisories.
COSO Internal Control - Integrated Framework, specifically on control activities.
"Internal Auditing: Assurance & Advisory Services" by IIA, Chapter on Procurement and Accounts Payable Controls.

Facilitation skills are critical for assessing corporate social responsibility through a self-assessment. Effective facilitation helps guide the participants through the self-assessment process, ensuring that all relevant issues are thoroughly discussed and that contributions from various stakeholders are effectively incorporated. This skill set is essential for eliciting insightful, honest feedback and fostering a constructive dialogue about the organization ' s social responsibility practices.
Institute of Internal Auditors (IIA) - International Professional Practices Framework (IPPF)