Which of the following statements is true regarding reporting results of the quality assurance and improvement program to senior management and the board?

While preparing the audit plan for an automobile manufacturing company, the chief audit executive (CAE) noted that the company's engineering department received a high risk ranking. However, the internal audit activity is understaffed, and current staff do not possess the necessary skills to adequately assess the effectiveness of the engineering department. What is the most appropriate course of action for the CAE to take?

Senior management and the board have expressed concerns about the length of engagements and whether their outcome aligns with the organization's strategies and objectives. Which of the following actions, if taken by the chief audit executive, could address these concerns?

What is the best course of action when the internal audit activity does not have the knowledge necessary to perform a planned audit of the organization's new IT data backup process?

Which of the following practices is generally most effective to protect internal audit objectivity?