Comprehensive and Detailed Explanation:
When risks are organized by processes, audits capture interfaces between organizational units (A) - i.e., the handoffs where errors and control breakdowns often occur. This approach ensures risks are evaluated across functional boundaries, improving coverage and understanding of interdependencies. Option B is incorrect - process-based audits can be more time-consuming, not less. Option C is subjective and not guaranteed. Option D exaggerates - no audit achieves "true completeness." The recognized advantage is that process-based audits capture risk and control interactions across departments, aligning with best practices in risk-based auditing.

Before developing the audit work program, it is essential to review the contract for evidence of authorization.
This step ensures that the contract is valid and approved by the appropriate parties, forming a critical basis for the compliance audit. By confirming authorization, the auditor can ascertain that the contract is legitimate and enforceable, and understand its key terms and conditions, which is necessary for planning and executing the audit effectively. Other steps, such as selecting a sample or assessing risks, are important but should follow after understanding the contract's validity and scope.
Institute of Internal Auditors (IIA), International Standards for the Professional Practice of Internal Auditing (Standards), Standard 2201 - Planning Considerations.

* Introduction:
* The chief audit executive (CAE) has a crucial role in reporting to the board on various aspects of the internal audit activity (IAA).
* Importance of Reporting:
* Periodic reports from the CAE to the board are essential for ensuring transparency and providing oversight on the IAA's performance and alignment with organizational objectives.
* Options Analysis:
* Option A: A complete, accurate, and comprehensive account of engagement observations and recommendations is generally part of the audit reports but not typically the subject of periodic reports from the CAE to the board.
* Option B: Oversight of the coordination between the internal audit activity and independent outside auditors is important but does not comprehensively cover the CAE's reporting responsibilities.
* Option C: The internal audit activity's purpose, authority, responsibility, and performance relative to plan encompass the core aspects of the IAA's alignment with organizational goals, effectiveness, and efficiency, making it the most comprehensive subject of periodic reports.
* Option D: Management's assertions regarding the system of internal controls are often part of audit findings but not the primary subject of CAE reports to the board.
* Conclusion:
* The CAE's periodic reports to the board should cover the IAA's purpose, authority, responsibility, and performance relative to the plan, ensuring that the board is well-informed about the internal audit's alignment with the organization's objectives and its overall performance.
Institute of Internal Auditors (IIA) Standard 2060: Reporting to Senior Management and the Board.

When preparing an internal control questionnaire for the procurement department, referencing relevant procurement laws or regulations ensures that the questions are aligned with the legal and regulatory requirements governing procurement activities. This approach helps to ensure that the questionnaire addresses all necessary compliance issues and identifies potential gaps in the organization's procurement processes that could lead to non-compliance.
The Institute of Internal Auditors (IIA) - Standards for the Professional Practice of Internal Auditing, Standard
2201 - Planning Considerations

To ensure that recommendations for enhancing internal controls have been effectively implemented, the internal auditor should conduct appropriate testing to verify management responses. This involves re- performing procedures, reviewing documentation, and possibly observing operations to confirm that the corrective actions have been adequately executed and are effective. Simply seeking a management assurance declaration (Option B) or observing corrective measures (Option A) may not provide sufficient evidence of proper implementation. Following up during the next scheduled audit (Option C) may delay the verification process, potentially allowing risks to persist.
IIA Standard 2500: Monitoring Progress.
IIA Practice Guide on Follow-up Processes in Internal Auditing.