In a small organization where management cannot achieve adequate segregation of duties for its cash- handling procedures, installing hidden surveillance cameras to monitor these activities is an example of a compensating control. Compensating controls are alternative measures implemented to mitigate risk when primary controls (such as segregation of duties) cannot be fully achieved. These controls help maintain security and oversight despite limitations in the control environment.
Internal control frameworks and best practices.

Audit logs are crucial for monitoring and reviewing the activities within IT systems, especially those processing personal data. The lack of audit logs presents a significant IT-related risk as it undermines the ability to trace any unauthorized or inappropriate access and actions within the system, thereby impacting the integrity and security of data.
Best practices in IT security and internal control frameworks like COBIT and ISO/IEC 27001.

The internal auditor is in conformance with The IIA's Code of Ethics and the Standards when testifying in front of a jury about an organization's fraudulent financial practices after receiving a subpoena. This action aligns with the ethical principles of integrity and objectivity, and the auditor is fulfilling their legal obligations while maintaining professional standards.
IIA Code of Ethics and Standards for the Professional Practice of Internal Auditing

In situations where the internal audit activity lacks specific financial accounting knowledge for certain audit projects, implementing a guest auditor program is a strategic approach. This program allows the organization to bring in external experts or auditors with specialized knowledge on a temporary basis to address the specific needs of the audit. This approach provides the required expertise without the long-term commitment of a full-time hire, ensuring flexibility and immediate enhancement of the audit team's capabilities.
The IIA Standards: Standard 1210 - Proficiency: "Internal auditors must possess the knowledge, skills, and other competencies needed to perform their individual responsibilities." IIA Practice Guide: "Guest Auditor Programs": Discusses the benefits of bringing in external experts for specialized audit needs.

IIA standards require that external quality assessments be conducted at least once every five years by an independent assessor. This ensures adherence to quality standards and strengthens the objectivity of the internal audit function.