The most accurate statement regarding the internal audit charter according to IIA guidance is that the charter must be approved by both senior management and the board. This ensures that the internal audit activity's purpose, authority, and responsibility are clearly defined and acknowledged by the organization's leadership, facilitating alignment with organizational governance.References: The IIA's guidance on internal audit charters, which emphasizes approval by senior management and the board as a key requirement.

Performing an annual organization-wide employee survey is a proactive role for the internal audit activity with regard to the organization's ethics program. This survey can help assess the ethical climate, identify potential ethical issues, and gather employee perceptions and feedback. The results can be used to improve the ethics program, enhance training, and ensure that ethical standards are effectively communicated and upheld throughout the organization.References:
* The IIA's Practice Guide on Evaluating Ethics-Related Programs and Activities.
* The IIA's International Professional Practices Framework (IPPF) on Assessing Organizational Ethics.

The correct statement regarding the role of the internal audit activity in the organization's risk management process is that the internal audit activity may coach management on risk response scenarios if appropriate safeguards have been implemented. This coaching role helps management understand and address risks effectively while maintaining the audit function's objectivity and independence.References: The IIA's guidance on the role of internal auditing in risk management and the standards regarding objectivity and consulting.

According to the International Professional Practices Framework (IPPF) issued by the Institute of Internal Auditors (IIA), the internal audit charter must be formally approved by senior management and the board. This requirement ensures that the internal audit activity has the appropriate authority, support, and independence to carry out its responsibilities effectively. The charter defines the purpose, authority, and responsibility of the internal audit activity, providing a clear framework for its operations and ensuring alignment with the organization's objectives and governance structures.
References:
* The IIA Standards: Standard 1000 - Purpose, Authority, and Responsibility: "The purpose, authority, and responsibility of the internal audit activity must be formally defined in an internal audit charter, consistent with the Definition of Internal Auditing, the Code of Ethics, and the Standards. The chief audit executive must periodically review the internal audit charter and present it to senior management and the board for approval."

A monitoring activity in organization-wide risk management would include validating the results of management's self-assessment. This activity ensures that risk management processes are effective and that self-assessments accurately reflect the risk status, aligning with the role of internal audit in providing assurance over risk management activities.References: COSO framework for risk management; IIA guidance on risk management.