The use of benchmarking research to support the preparation of a report on control deficiencies demonstrates critical thinking. This skill involves analyzing and evaluating information from multiple sources to form a well-rounded view of the audit area, leading to significant findings and effective recommendations in the audit report.
Commonly recognized audit practices and skills as documented in auditing literature and the IIA's Competency Framework.

According to IIA standards, assurance services are expected to be included in the risk-based audit plan as they are integral to the systematic evaluation and improvement of risk management, control, and governance processes. Consulting services, however, are typically requested by management and do not necessarily follow the structured inclusion in the risk-based plan, reflecting their more flexible and situational nature.
The IIA's International Standards for the Professional Practice of Internal Auditing, particularly distinctions between assurance and consulting activities.

Being denied access to necessary information such as expenditure and budget reports because they are considered confidential affects the authority of the internal audit activity. Authority, as granted by the audit charter, should include unrestricted access to all records and data required by the audit team to perform its duties effectively. Limitations on access impair the audit's scope and the auditors' ability to conduct thorough and complete audits. References: IIA Standard 1110: Organizational Independence, which stresses the importance of internal auditors having appropriate and unrestricted access to information.

The oversight of an organization's risk management framework is primarily the responsibility of the board of directors. The board's role includes ensuring that risk management processes are integrated with overall organizational processes and that the strategies and policies regarding risk management are effectively managed and aligned with the organization's objectives. Operational management, internal auditors, and the head of risk management each play roles within the framework established by the board but do not have overall oversight responsibility.
Institute of Internal Auditors (IIA) - International Professional Practices Framework (IPPF)

According to IIA guidance, internal auditors are encouraged to obtain appropriate professional designations.
This encouragement is part of a broader recommendation to pursue continuous professional development and maintain proficiency in audit practices. The statement correctly reflects the IIA's position on the importance of professional qualifications, though it does not imply that specific designations are mandatory.
IIA standards and guidelines, which promote ongoing professional education and encourage auditors to obtain certifications relevant to their field of work.