The activity of requiring all employees in the IT department to attend annual training on the department's mission, values, and key performance measures is designed to prevent communication failure. This type of training ensures that all employees are aware of and understand the department's goals and objectives, which is crucial for maintaining effective communication and ensuring that everyone is aligned with the department's mission.References: Institute of Internal Auditors (IIA) - International Professional Practices Framework (IPPF)

According to the Institute of Internal Auditors (IIA) standards and guidance, the board of an organization defines the overall responsibilities and expectations of the internal audit activity, including its role in providing consulting services. This oversight aligns with the governance role of the board to ensure that the internal audit activity conforms to the standards and adds value to the organization. The internal audit activity may provide consulting services that are advisory in nature and agreed upon with management, but it is the board that sets the overarching governance framework.References: Institute of Internal Auditors (IIA) - International Professional Practices Framework (IPPF)

According to IIA guidance, the primary reason the chief audit executive discusses the internal audit charter with senior management and the board is to provide an understanding of the Mission of Internal Audit and The IIA's mandatory guidance elements. The charter defines the purpose, authority, and responsibility of the internal audit activity, aligning it with the organization's objectives and governance.References: The IIA's International Professional Practices Framework (IPPF) particularly emphasizes the importance of the internal audit charter as a foundational document.

In this situation, the internal auditor violated the IIA's Code of Ethics by using confidential information obtained during an audit (salary data) for personal gain (negotiating work conditions). This action breaches the confidentiality and objectivity principles outlined in the IIA Code of Ethics, which require auditors to refrain from using information for any personal advantage or in a manner that would be detrimental to the legitimacy or trust of the audit function.References: Institute of Internal Auditors (IIA) - Code of Ethics

Exercising due professional care means ensuring that audit procedures are sufficient to meet the audit objectives and identify all significant risks. Ensuring that the work program is appropriately designed to identify all risks surrounding the payroll process demonstrates due professional care, as it involves planning and performing the audit with diligence and thoroughness.
* Option B: Determining compliance with laws is part of due professional care but not as comprehensive as designing the work program to identify all risks.
* Option C: Verifying internal controls implementation is part of the audit scope but does not fully encompass due professional care in planning and executing the audit.
* Option D: Consulting with the risk manager is a good practice but does not substitute for the auditor's responsibility to plan and perform the audit.
References:
* IIA Standard 1220: Due Professional Care.
* IIA Practice Guide: Due Professional Care.