According to IIA guidance, the scope of a consulting engagement is determined by either the engagement supervisor or the chief audit executive (CAE), and it is finalized before beginning fieldwork. This ensures that the objectives, deliverables, and expectations are clearly defined and agreed upon by all parties involved. This clear definition helps guide the consulting engagement, ensuring that it meets the client's needs and aligns with the internal audit activity's capabilities.
References:
* The Institute of Internal Auditors (IIA) Standards and Practice Advisories.
* IIA's International Professional Practices Framework (IPPF).
* "Internal Auditing: Assurance & Advisory Services" by IIA, Chapter on Consulting Services.

System validations and edit checks on vendor identification numbers are primary controls that effectively reduce the risk of setting up duplicate vendors in the system. These controls ensure that each vendor's information is unique and verified against existing records before a new vendor is entered into the system, thereby preventing duplication.References: Institute of Internal Auditors (IIA) - Risk Control Matrices and Internal Control Frameworks

In this scenario, the new recruit has a potential conflict of interest due to her recent role in the finance department. To maintain the objectivity and independence required by the IIA Standards, it is essential to prevent any actual or perceived bias in the audit process. Assigning the new auditor to assist with developing the audit program, but ensuring that the execution of the program is handled by other audit staff (Option B), is the most appropriate approach. This ensures her expertise is utilized without compromising the integrity of the audit. Standard 1130: Impairment to Independence or Objectivity requires auditors to avoid auditing areas where they have recently worked or where personal relationships could impair their objectivity.References:
* IIA Standards, Standard 1130: Impairment to Independence or Objectivity
* IIA Standards, Standard 1100: Independence and Objectivity

For the internal audit activity to achieve conformance with the Standards, it is crucial that the internal audit charter has been approved by the board within the past year. Regular approval and review of the charter by the board ensure that it remains relevant and aligned with the organization's objectives and governance frameworks. This approval process is part of maintaining the necessary authority and scope as prescribed by The IIA standards.References: The IIA's International Standards for the Professional Practice of Internal Auditing on charter review and approval.

Selling a nonstrategic business unit is an example of a risk avoidance strategy. By divesting from parts of the business that are not core to its strategic objectives or that may represent heightened risks, an organization effectively avoids the risks associated with maintaining those operations.References: Risk management strategies and definitions as provided in risk management and internal audit literature, which categorize selling non-core units as avoidance since it eliminates specific risks.