The IIA's Standards require that an external assessment of an organization's internal audit activity must be conducted at least once every five years. Option A is the only acceptable approach listed that aligns with these standards. It involves conducting a self-assessment with independent validation by a qualified and experienced internal auditor, followed by scheduling an external assessor who is also qualified and independent. This process ensures compliance with the IIA's requirement for external assessments, maintaining both the credibility and objectivity of the internal audit activity.
The Institute of Internal Auditors (IIA) - Standards for the Professional Practice of Internal Auditing

Internal auditors are required to have sufficient knowledge to identify indicators of fraud. They should recognize red flags and investigate them further, even if their primary responsibility is not to detect fraud.
References:
* IIA Standard 1210.A2 - Proficiency: Internal auditors must have sufficient knowledge to evaluate the risk of fraud.
* IIA Practice Guide on Fraud and Internal Auditors.

According to IIA guidance, the results of ongoing monitoring of the internal audit activity's performance must be reported to senior management and the board at least annually. This ensures that the board and senior management are regularly informed about the effectiveness and efficiency of the internal audit function, aligning with the IIA's standards on quality assurance and improvement.
The Institute of Internal Auditors (IIA) - International Standards for the Professional Practice of Internal Auditing.

A chief audit executive failing to perform a risk assessment prior to preparing the audit plan demonstrates nonconformance with the Standards. According to IIA standards, specifically Standard 2010 - Planning, a risk assessment must inform the audit plan, ensuring that resources are appropriately directed towards areas of higher risk. References: IIA Standard 2010: Planning, which mandates the requirement for risk assessments in audit planning.

An internal audit client survey is a tool that collects feedback from audit clients regarding the performance and effectiveness of internal auditors. This survey can highlight areas where a staff internal auditor may need improvement, including business acumen. Client feedback is direct and relevant, offering insights into how well the auditor understands the business context and applies this knowledge during audits.
* Option A: A quality assessment review focuses on the overall quality of the internal audit activity, not on individual staff business acumen.
* Option C: A control self-assessment involves self-evaluation of controls within business units, not directly addressing individual auditor's skills.
* Option D: A peer review assesses the internal audit activity's adherence to standards but does not specifically target business acumen of individual auditors.
IIA's Quality Assessment Manual.
IIA Practice Guide: Client Surveys.