Part of the internal audit activity's duties includes assisting management in developing processes and controls to manage risks and issues. While internal auditors are primarily responsible for evaluating the effectiveness of risk management and control processes, they also play a key role in advising and consulting with management to help design and improve these processes, thereby adding value to the organization.
References:
* The IIA Standards: Standard 2130 - Governance: "The internal audit activity must assess and make appropriate recommendations to improve the organization's governance processes for making strategic and operational decisions, overseeing risk management and control, and promoting appropriate ethics and values within the organization."
* IIA Practice Guide: "Consulting Services and the Internal Audit Activity": Discusses how internal auditors can provide value-added services, including assisting management with process improvements and control development.

According to the IIA's International Standards for the Professional Practice of Internal Auditing (Standards)
2420.A1, it is stated that the internal auditor must disclose all material information obtained by the date of the final engagement communication, which could impact the engagement conclusion or decision-making process.
This ensures that all relevant facts are communicated to stakeholders appropriately.References: International Standards for the Professional Practice of Internal Auditing (Standards) 2420.A1

Control activities are specific actions defined by management aimed at mitigating risk to the achievement of objectives. They are part of the broader internal control framework, which management designs according to the organization's risk management strategies. These activities can vary widely across different organizations depending on the specific risks they face and the strategies management employs to mitigate these risks.References: COSO Framework on Internal Controls

The chief audit executive (CAE) is responsible for ensuring the professional development of the internal audit staff. This responsibility includes providing opportunities for ongoing training and development to maintain and enhance their competencies. References:
* IIA Standard 1230: Continuing Professional Development.
* IIA Practice Guide: Continuing Professional Development for Internal Auditors.

The authority of the internal audit activity, as outlined in the audit charter, includes having full access to the organization's records, physical property, and personnel necessary to conduct audit engagements. This access is critical for the internal audit activity to perform its duties effectively and independently, ensuring that auditors can obtain the information and resources they need to evaluate the organization's processes and controls comprehensively.
References:
* The IIA Standards: Standard 1000 - Purpose, Authority, and Responsibility: "The purpose, authority, and responsibility of the internal audit activity must be formally defined in an internal audit charter...
The chief audit executive must periodically review the internal audit charter and present it to senior management and the board for approval."
* The IIA Practice Guide: "Understanding the Importance of the Internal Audit Charter": Emphasizes the necessity for the internal audit activity to have unrestricted access to organizational records, property, and personnel.