In the accounts payable function, the most likely fraud scenario involves the creation of fictitious vendors.
This fraud can lead to improper disbursements where payments are made to non-existent entities, effectively siphoning money out of the organization. This type of fraud is easier to execute in accounts payable compared to other functions because it can involve relatively straightforward manipulations of vendor master files and payment processes. Such schemes can result in significant financial losses and are a common concern for internal auditors reviewing accounts payable controls.
IIA Practice Guide on Accounts Payable Risks and Controls.
Association of Certified Fraud Examiners (ACFE) publications on common fraud schemes.

To effectively determine whether ethical values are followed throughout an organization, internal auditors should review employee survey responses and follow up on those that suggest weaknesses in the ethical climate. This approach allows auditors to gather firsthand insights from employees about the actual ethical environment, which can be more telling than formal documentation or compliance with written policies alone.
It provides a direct measure of the ethical culture as experienced and perceived by the employees themselves.
Institute of Internal Auditors (IIA) - International Standards for the Professional Practice of Internal Auditing; Guidance on assessing organizational culture.

Loss of intellectual property is a significant strategic risk that internal auditors should consider when performing a third-party risk management engagement. This risk can have substantial implications for the organization's competitive advantage, reputation, and financial performance. Ensuring that third parties have adequate controls to protect intellectual property is essential for mitigating this risk. Internal auditors should evaluate the effectiveness of these controls and the potential impact of intellectual property loss on the organization's strategic objectives.
The IIA Standards: Standard 2120 - Risk Management: "The internal audit activity must evaluate the effectiveness and contribute to the improvement of risk management processes." IIA Practice Guide: "Auditing Third-party Risk Management": Highlights the importance of assessing strategic risks, including intellectual property protection, in third-party relationships.

Appropriate disclosure of nonconformance with the Standards is demonstrated when the chief audit executive (CAE) discusses with the board issues regarding the internal audit activity performing an IT engagement without proper skills and knowledge. This direct communication with the board about significant issues affecting the internal audit function's ability to conform to professional standards is crucial for ensuring accountability and transparency.
IIA Standards on communication and disclosure of nonconformance.

Internal auditors may provide consulting services relating to operations for which they had previous responsibilities, provided they do not currently have any operational responsibilities that would impair their objectivity. This scenario is possible under IIA guidelines as long as any potential conflicts of interest are managed, and auditors maintain their independence regarding the areas they are auditing.
IIA's International Standards for the Professional Practice of Internal Auditing, specifically standards on objectivity and independence in consulting roles.