When using the balanced scorecard approach to assess the performance of the internal audit activity, a key performance indicator relevant to the audit client is the percentage of recommendations implemented by the corrective action date. This KPI measures the effectiveness and impact of the audit activity by tracking how well the audit recommendations are being acted upon within the agreed-upon timeframe. It reflects the responsiveness and commitment of the organization to address identified issues and improve its control environment, which is directly relevant to the interests and concerns of the audit clients.
The Institute of Internal Auditors (IIA) Practice Guide: "Measuring Internal Audit Performance" Kaplan, R.S. & Norton, D.P. (1996). "The Balanced Scorecard: Translating Strategy into Action"

Lagging indicators measure outcomes after the fact, while leading indicators provide predictive insight.
Return on investment (ROI) is the most lagging because it measures financial performance after investments and operations have already occurred.
* Customer retention (B) and employee satisfaction (C) are more intermediate indicators.
* Cost of R&D (D) is a leading indicator, as it influences future innovation.
Thus, ROI is the most lagging indicator.

To efficiently gather input from a large, geographically dispersed group, a structured survey with scaled responses (B) is most effective. This allows for easy comparison and aggregation of results. Options A and C are less efficient due to open-ended responses, while D is too narrow.

The primary purpose of issuing a preliminary communication to management of the area under review is to help them develop more responsive and timely action plans. Preliminary communications, such as interim reports or discussions, inform management about the audit's progress, preliminary findings, and potential issues. This early communication allows management to begin addressing identified issues before the final report, leading to more timely and effective corrective actions. It also fosters collaboration and ensures management is engaged in the remediation process from the outset.
The IIA's International Standards for the Professional Practice of Internal Auditing, Standard 2410.A1 - Communication Criteria.

If the chief audit executive (CAE) determines that management has chosen to accept a high-level risk that may be unacceptable to the organization, the CAE should first discuss the matter with senior management. If senior management does not address the concern, the CAE should escalate the issue to the board. This escalation process ensures that the highest levels of governance are aware of significant risks and can take appropriate action if necessary. It also aligns with the CAE's responsibility to ensure that risks are properly managed within the organization.
The Institute of Internal Auditors (IIA) - Standards for the Professional Practice of Internal Auditing, Standard
2600 - Communicating the Acceptance of Risks