According to IIA guidance, which of the following corporate social responsibility {CSR) evaluation activities may be performed by the internal audit activity?
1. Consult on CSR program design and implementation
2. Serve as an advisor on CSR governance and risk management.
3. Review third parties for contractual compliance with CSR terms.
4. Identify and mitigate risks to help meet the CSR program objectives.

Which of the following best describes the assessment of risks?

Which of the following statements would typically be included in the responsibility section of the internal audit charter?

Which of the following is a preventive control?

Which of the following would be the most effective action for an internal audit activity to take in order to assist in improving an organization's ethical climate?
I. Review formal and informal processes within the organization that could promote unethical behavior.
II. Conduct surveys of employees, suppliers, and customers regarding ethics.
III. Assess the employees' knowledge of and compliance with the organization's code of conduct.