During the design evaluation phase of an audit, the internal auditor ' s primary role is to assess whether the controls in place are appropriately designed to mitigate risks. This includes identifying key controls such as those over segregation of duties, which is a fundamental control to prevent fraud and errors by ensuring that no single individual has control over all aspects of a transaction.
IIA References:
IIA Standard 2201: Planning Considerations highlights the importance of evaluating the adequacy of controls during the design phase. Identifying controls over segregation of duties is a critical step in this process as it ensures that the design is robust and capable of mitigating risks.

When interviewing a fraud suspect, it is important to gather both subjective and objective information (Option
1). Subjective information can include opinions or perspectives, which may provide insights into motivations or behaviors, while objective information consists of factual data. The interviewer typically begins with open- ended questions (Option 3) to allow the suspect to provide information freely and without leading them to specific answers. The primary objective is to gather information rather than to obtain a written confession (Option 2), and video recordings, while beneficial in certain cases, are not always used and thus not a standard requirement (Option 4). References:
* The IIA's Practice Guide on Conducting Internal Audits in Conformance with the International Standards for the Professional Practice of Internal Auditing (Standards).
* The IIA's Practice Guide on Fraud Auditing and Investigation.

Reviewing and initialing internal audit workpapers ensures that the engagement has adequate supervision.
This practice demonstrates that the supervisor has reviewed the work performed by the audit team, verified the accuracy and completeness of the documentation, and provided necessary guidance. It is a critical step in the quality assurance process, ensuring that the audit findings and conclusions are supported by sufficient and appropriate evidence.
Institute of Internal Auditors (IIA), International Standards for the Professional Practice of Internal Auditing (Standards), Standard 2340 - Engagement Supervision.

In the context of internal auditing, activities that pose immediate and significant risks to health, safety, the environment, or that conceal inappropriate activities within an organization are of high importance and typically require formal communication to the chief audit executive (CAE). These activities could have severe legal, financial, and reputational consequences for the organization. While acts that favor one party to the detriment of another are concerning and may indicate ethical or procedural issues, they are generally considered less critical compared to the other options, as they do not necessarily imply immediate and severe risks to individuals or the organization as a whole.
The Institute of Internal Auditors (IIA) International Standards for the Professional Practice of Internal Auditing (Standards), specifically Standard 2060: Reporting to Senior Management and the Board.
IIA Practice Guide on Communicating Unacceptable Risk.