Comprehensive and Detailed Explanation From Exact Extract:
A scatter diagram plots two variables on a graph to examine whether there is a correlation or relationship.
Here, electricity price and wind speed can be plotted to test if changes in one relate to changes in the other.
* A Gantt chart (A) is for project scheduling.
* A RACI chart (C) clarifies roles and responsibilities.
* A SIPOC diagram (D) maps processes.
Therefore, the best analytical tool for correlation analysis is the scatter diagram.

According to IIA guidance, curiosity is a key attribute that indicates a candidate's ability to probe further when reviewing incidents that have the appearance of misbehavior. Curiosity drives the auditor to ask deeper questions, seek out underlying causes, and thoroughly investigate anomalies. While integrity (Option A), flexibility (Option B), and initiative (Option C) are important qualities for an internal auditor, curiosity specifically relates to the propensity to investigate and uncover the truth behind incidents.
:
IIA Standard 1200: Proficiency and Due Professional Care.
IIA Practice Guide on Competency Framework for Internal Auditing.

In internal auditing, reviewing the vendor master file for authorizations is a test to ensure that only authorized vendors are in the system, which directly relates to the effectiveness of control measures in place. This means verifying that the controls are effective in preventing unauthorized or fraudulent vendors from being added, thereby safeguarding the organization against potential risks such as fraud, unauthorized transactions, or compliance violations.
:
Institute of Internal Auditors (IIA), International Standards for the Professional Practice of Internal Auditing (Standards), Standard 2120 - Risk Management.

Comprehensive and Detailed Explanation:
The most objective way to validate hours worked is to cross-check billed hours with independent evidence of presence - such as access logs (C) from security or entry systems. This provides direct evidence that contracted personnel were on-site.
* Option A (due diligence review) focuses on vendor selection, not time validation.
* Option B relies on vendor-supplied data, which may be manipulated.
* Option D provides insights but is subjective.
According to IIA Standard 2310, evidence must be reliable and verifiable. Access logs provide such assurance, making Option C the strongest choice.

Best practices for assurance engagement communication activities include defining the methods and timing of engagement communications during the "communicate" phase. This ensures that all stakeholders are aware of how and when they will receive information about the engagement, facilitating clear and effective communication. While it is important to communicate significant observations to relevant parties, including the audit committee if necessary, and to escalate issues as appropriate, the method and timing of these communications are crucial for maintaining clarity and coordination throughout the engagement. References:
* The IIA's International Standards for the Professional Practice of Internal Auditing (Standards), specifically Standard 2420 - Quality of Communications.
* The IIA's Practice Guide on Communicating Assurance Engagement Results.