When dealing with requests for internal audit records, especially those involving third parties, it is crucial to balance the need for confidentiality with the potential benefits of sharing information. According to IIA guidance, the chief audit executive (CAE) should consult with senior management to ensure that any decision to release audit records is aligned with the organization's policies, legal considerations, and ethical standards.
Consulting with senior management allows for a thorough evaluation of the implications of releasing the records, including potential risks, legal constraints, and the impact on relationships with third-party suppliers.
This collaborative approach ensures that the decision is well-informed and appropriately authorized.
IIA Standard 2440: Disseminating Results
IIA Code of Ethics: Confidentiality Principle

Demonstrating due professional care in internal auditing involves thorough planning and executing audit procedures that are appropriate to the scope and objectives of the audit. Option B, planning and executing fieldwork in a complete and timely manner to identify all significant risks, best demonstrates due professional care by ensuring that all relevant risks associated with the organization ' s assets are identified and addressed.
This approach aligns with IIA standards that require auditors to apply knowledge, skills, and experience appropriately in providing assurance services.
IIA Standard 2200: " Due Professional Care "

The correct statement regarding the role of the internal audit activity in the organization's risk management process is that the internal audit activity may coach management on risk response scenarios if appropriate safeguards have been implemented. This coaching role helps management understand and address risks effectively while maintaining the audit function's objectivity and independence.
The IIA's guidance on the role of internal auditing in risk management and the standards regarding objectivity and consulting.

When the internal audit activity does not have the appropriate skills to review the organization's compliance with recently introduced legislation on international transfer pricing, the most appropriate course of action is to outsource the engagement to an external audit firm that has the necessary expertise. This ensures that the review is conducted thoroughly and accurately by professionals with specialized knowledge, maintaining the quality and reliability of the audit work while addressing the specific requirements of the engagement.
The IIA's International Standards for the Professional Practice of Internal Auditing (Standards) - Standard
1210: Proficiency.
The IIA's Practice Guide on Coordinating Internal and External Audit Activities.