To identify questionable bidding practices, the internal audit activity should review the city ' s contracting files. This review will help determine if the city made efforts to solicit bids from a diverse range of interested firms, ensuring a fair and competitive bidding process. By examining these files, the auditors can identify any patterns of favoritism or irregularities in the awarding of contracts, which are key indicators of questionable bidding practices. This approach is consistent with best practices in auditing procurement processes.
The IIA Standards: Standard 2210 - Engagement Objectives: " Internal auditors must consider the probability of significant errors, fraud, noncompliance, and other exposures when developing the engagement objectives.
"
IIA Practice Guide: " Auditing the Procurement Function " : Emphasizes the importance of reviewing solicitation efforts and contract awards to detect potential irregularities.

The IIA recognizes that internal auditors can provide valuable consulting services that support the organization's risk management without compromising their independence. Facilitating risk assessment workshops (option B) is a consulting service that internal auditors can perform, which helps the organization identify and evaluate risks in a structured way. This activity does not involve making management decisions or assuming management responsibilities, preserving the internal audit's advisory role.
IIA Standard 1000: "Consulting Services"

A budget is an example of a management control technique. It is used by management to plan for, monitor, and control the financial resources of the organization, ensuring that spending aligns with the organization's strategic objectives and financial constraints.
Management control systems and techniques in organizational management literature.

A conflict of interest is a situation where an internal auditor's personal or professional interests may compromise their objectivity, integrity, or ability to perform their work effectively. A conflict of interest policy is a document that defines what constitutes a conflict of interest, how to identify and report it, and how to manage or resolve it. Therefore, option D is the best answer.

The most effective risk management strategy for a manufacturer experiencing regular fluctuations in the price of electrical power, which impacts the bottom line, would be to use a forward contract for bulk power purchases. This strategy allows the manufacturer to lock in power prices for a future period, thus reducing the risk associated with price volatility and providing more predictable cost planning.
Risk management strategies in operations and finance, as discussed in business management and internal auditing literature, which advocate using financial instruments like forward contracts to hedge against price fluctuations.