An internal auditor would consider the need to outsource competencies and skills during the inspection of a wind turbine if they notice discrepancies that require specialized knowledge. For example, if an auditor observes that replaced parts are used despite purchase documents indicating a longer lifespan, this situation may necessitate expertise in wind turbine technology and maintenance to assess the issue accurately.
Outsourcing ensures that the audit is conducted with the necessary technical proficiency.
:
IIA Standards: 1210 - Proficiency
IIA Practice Guide: Outsourcing Internal Audit Activities

When preparing a detailed risk assessment during engagement planning, the internal auditor should collaborate with the management of the function being reviewed. Management has the most in-depth knowledge of their business objectives, processes, and the associated risks. This cooperation ensures that the risk assessment is comprehensive, accurate, and relevant to the specific context of the function under review.
It also helps in identifying any potential areas of concern that might not be evident to external parties.
:
IIA Standard 2201: "Planning Considerations"
IIA Practice Guide: "Assessing the Adequacy of Risk Management Processes"

Developing a tracking system to monitor the status of engagement recommendations ensures that the chief audit executive (CAE) can systematically track the progress and implementation of corrective actions. This approach provides continuous assurance that recommendations are being acted upon and allows the CAE to identify and address any delays or issues in the implementation process. It is a proactive strategy that enables regular follow-ups and reporting to senior management, thus maintaining accountability and transparency.
:
The Institute of Internal Auditors (IIA) - Standards for the Professional Practice of Internal Auditing, Standard
2500 - Monitoring Progress

Adding invoices to the computer program to assess the reliability and effectiveness of the review process and whether controls work best describes an internal auditor's use of test data. This approach involves introducing test data into the system to evaluate how well the system processes invoices and whether it effectively identifies and prevents questionable invoices from being processed for payment.
:
IIA Standards: 1220.A2 - Proficiency and Due Professional Care
IIA Practice Guide: Use of Technology in Auditin

After considering fraud scenarios and identifying and prioritizing fraud risks, the next immediate action for the internal auditor is to determine which controls are in place to mitigate those risks. This step involves assessing the effectiveness of existing controls and identifying any gaps where controls may be insufficient or absent. Understanding the control environment is crucial for developing a comprehensive fraud risk assessment and ensuring that appropriate measures are in place to prevent and detect fraud.
:
Institute of Internal Auditors (IIA), Practice Guide - Internal Auditing and Fraud.