Part of the internal audit activity's duties includes assisting management in developing processes and controls to manage risks and issues. While internal auditors are primarily responsible for evaluating the effectiveness of risk management and control processes, they also play a key role in advising and consulting with management to help design and improve these processes, thereby adding value to the organization.
The IIA Standards: Standard 2130 - Governance: "The internal audit activity must assess and make appropriate recommendations to improve the organization's governance processes for making strategic and operational decisions, overseeing risk management and control, and promoting appropriate ethics and values within the organization." IIA Practice Guide: "Consulting Services and the Internal Audit Activity": Discusses how internal auditors can provide value-added services, including assisting management with process improvements and control development.

By accepting a role as an engagement supervisor on a highly specialized and technical engagement for which she did not have the expertise, the internal auditor violated the fundamental principle of competency as outlined in The IIA's Code of Ethics. The principle of competency requires internal auditors to perform audit services with the necessary knowledge, skills, and experience. Accepting an assignment without the required expertise undermines the quality and reliability of the audit work.
The IIA Code of Ethics: "Internal auditors shall engage only in those services for which they have the necessary knowledge, skills, and experience." The IIA Standards: Standard 1210 - Proficiency: "Internal auditors must possess the knowledge, skills, and other competencies needed to perform their individual responsibilities."

In a competitive retail environment where sales teams are incentivized to meet or exceed targets, there is a significant risk of data manipulation. Employees may falsify sales records, inflate numbers, or engage in other unethical behaviors to ensure they receive bonuses. This is a common issue in environments with high stakes and rewards tied to performance metrics, as the pressure to succeed can lead individuals to manipulate data to appear more successful than they actually are. Therefore, management should closely monitor data integrity and implement strong controls to detect and prevent such manipulation. References: The IIA's International Standards for the Professional Practice of Internal Auditing (Standards), specifically Standard 2120 - Risk Management, and COSO's Internal Control - Integrated Framework.

The IIA standards specify that quality assurance and improvement programs (QAIP) must include both internal and external assessments. The internal assessments must be conducted continuously, and external assessments must be conducted at least once every five years, not seven. A key aspect of QAIP is that quality assessments should be performed by individuals who have sufficient knowledge of internal audit practices, ensuring the effectiveness and credibility of the audit process.
IIA Standard 1300: "Quality Assurance and Improvement Program"

For entry-level internal auditors, the primary engagement responsibility typically involves documentation.
This includes accurately and thoroughly documenting audit evidence and findings, which is essential for supporting the audit's conclusions and for review by more senior auditors. This task is fundamental for ensuring that audit work is recorded and traceable, aligning with the IIA's standards on performance (specifically, documenting information to support conclusions and engagement results).
The Institute of Internal Auditors (IIA) - International Standards for the Professional Practice of Internal Auditing.