If an internal auditor decides to adjust the audit work program during the fieldwork phase of an assurance engagement, the most appropriate next step is to obtain approval from the engagement supervisor. This ensures that any changes to the scope or procedures are reviewed and sanctioned by the audit management, maintaining the integrity and alignment of the audit objectives.
IIA Standards: 2240 - Engagement Work Program
IIA Practice Guide: Engagement Planning

Proficiency in internal auditing is not only about technical skills but also involves continuous education and staying updated with the latest practices and standards in the field.
Option D reflects the commitment to ongoing professional development, ensuring that internal auditors maintain and enhance their proficiency over time.
The Institute of Internal Auditors (IIA) emphasizes the importance of continuing professional development as a means to ensure auditors remain competent in their roles

In a compliance audit, the objective is to assess adherence to laws, regulations, or regulatory requirements.
For banking compliance, this means verifying whether business continuity plans comply with mandatory regulations (Option B). Options A, C, and D relate to efficiency, best practices, or operations - not compliance.

For effective coordination of assurance coverage, the chief audit executive (CAE) should consider creating an assurance map. An assurance map provides a visual representation of the assurance activities across the organization, showing who is providing assurance, the areas covered, and the level of assurance provided.
This helps to identify gaps and overlaps in assurance coverage, enabling better coordination and optimization of resources. This approach is recommended by best practices in internal auditing as it aligns assurance activities with organizational risk and ensures comprehensive coverage.
The Institute of Internal Auditors (IIA) Practice Guide: Coordinating Risk Management and Assurance.
IIA Standard 2050 - Coordination and Reliance

Integrated Test Facilities (ITF) are the most appropriate choice for simulating transactions for testing in an automated audit tool. ITF involves embedding fictitious transactions into the normal processing environment of the billing application without the knowledge of operational staff. This allows the internal auditor to assess transaction processing integrity, validation, and system calculations under real-time conditions.
* Generalized audit software (GAS) is mainly used for data extraction and analysis but does not embed test transactions within live systems.
* Utility software includes tools for system maintenance but is not designed for auditing transactions.
* Audit expert systems provide decision-making support rather than transaction simulation.
Reference:IIA Global Technology Audit Guide (GTAG) - Continuous Auditing: Implications for Assurance, Monitoring, and Risk Assessment.