Developing a risk and control model for an engagement should take into account the specific characteristics, processes, and risks of the organization being audited. Tailoring the model ensures that the controls are relevant and effective for the specific context of the organization, leading to a more accurate and useful audit outcome. References:
* IIA's International Professional Practices Framework (IPPF), particularly on risk-based auditing and control frameworks.

An internal auditor exercises due professional care by enhancing knowledge, skills, and other competencies through ongoing professional development. This action is essential to maintain the necessary proficiency and competency in performing audit tasks, thereby ensuring the quality and effectiveness of the audit work aligns with professional standards and meets the evolving needs of the organization.
Institute of Internal Auditors (IIA) - International Professional Practices Framework (IPPF)

Given the chief audit executive's (CAE) new responsibility for the risk management and compliance operations, the independence of the internal audit activity could be compromised in future audits of these functions. Therefore, to maintain objectivity and impartiality, audits of risk management and compliance functions should ideally be overseen by a competent external assurance provider. This approach ensures that the audit is free from internal influence and bias, aligning with the IIA's standards on independence and objectivity.
IIA Standard 1110 - Organizational Independence

According to IIA guidance, the practice by the chief audit executive (CAE) that best enhances the organizational independence of the internal audit activity is meeting privately with the board at least annually.
This practice ensures that the internal audit activity can operate independently of management and directly report and discuss significant matters with the board, which is critical for maintaining its independence and objectivity.
The Institute of Internal Auditors (IIA) - International Standards for the Professional Practice of Internal Auditing.

The role of the board in organizational governance most accurately involves the responsibility for the outcome of the process. This encompasses overseeing the strategic direction of the organization, ensuring that corporate objectives are met, and that the management's activities align with the overall strategic vision and risk appetite of the organization. The board's oversight role is crucial in ensuring effective governance and accountability throughout the organization.
The Institute of Internal Auditors (IIA) - International Standards for the Professional Practice of Internal Auditing