The best technique to detect fictitious vendors in the organization ' s computer system is to run checks to find matches between vendor and employee addresses. This method is effective because fictitious vendors often have addresses that match those of employees creating them. This kind of analysis targets the direct linkage between fraudulent activities and internal entities, which is a common red flag in vendor fraud scenarios.
Association of Certified Fraud Examiners (ACFE) - Techniques for Fraud Detection

The nature of services provided by the internal audit activity, including training management on internal controls, is typically defined in the audit charter. The audit charter outlines the purpose, authority, and scope of the internal audit activity, including any advisory services it provides, such as training. It establishes the framework within which the internal audit team operates and serves as a formal document that specifies the arrangement between the internal audit function and the rest of the organization.
IIA Standard 1000: Purpose, Authority, and Responsibility.

The organization aspect of an internal audit charter relates to the reporting structure for the internal audit activity. It establishes the position of the internal audit activity within the organization, and defines its functional and administrative reporting lines. The organization aspect also ensures that the internal audit activity has sufficient independence and authority to perform its work effectively and objectively.

If an internal auditor suspects fraud during an engagement, the expected action is to evaluate the suspected activities to determine whether a formal investigation is warranted. This step is crucial as it ensures that suspicions are substantiated before escalating the issue, thereby maintaining the integrity and objectivity of the internal audit process. This approach aligns with the IIA's guidance on handling fraud, including assessing and responding to risks of fraud during audit engagements.
The Institute of Internal Auditors (IIA) - International Standards for the Professional Practice of Internal Auditing

An organization that takes no action in managing the possible exposure to an earthquake is adopting an acceptance technique in terms of its risk response. This technique involves acknowledging the risk but choosing not to take any proactive steps to manage it, essentially accepting the potential consequences.
Risk management strategies as per IIA guidance.