* A. Book value per common share ratio is lower than that of the prior year:This represents year-over- year comparison, which is an example of historical benchmarking, not internal benchmarking.
* B. Staff turnover ratio is higher than the comparable organization in the same industry:This represents external benchmarking, as it involves comparing against a peer organization.
* C. Utilities expense of the sales unit is higher than that of the customer service unit:Correct. This is internal benchmarking, as it compares performance metrics within the same organization.
* D. Sales are significantly higher than the industry's average for five years:This is an example of external benchmarking against the industry standard.
CIA Exam Syllabus Reference:
Domain V: Performing Internal Audit Services - Benchmarking Techniques.

According to the Institute of Internal Auditors (IIA) guidance, internal audit activities can encompass several aspects of evaluating corporate social responsibility (CSR) programs.
* Consulting on Design and Implementation: Internal auditors can provide valuable insights into the design and implementation of CSR programs to ensure they are well-structured and aligned with organizational objectives.
* Advising on Governance and Risk Management: Serving as advisors, internal auditors can help in establishing effective governance structures and identifying and managing risks associated with CSR initiatives.
* Mitigating Risks: By identifying and mitigating risks, internal auditors support the achievement of CSR program objectives, ensuring these initiatives are both effective and sustainable.
* Reviewing Third Parties: While internal auditors may review third parties for contractual compliance with CSR terms, this activity is more often part of broader compliance audits rather than a specific focus area for CSR evaluations.
References:
"IIA Practice Guide: Auditing Corporate Social Responsibility," which outlines the role of internal auditors in CSR-related activities.

Valid closure of an audit observation requires evidence that the corrected process will function as expected in the future. This involves not just addressing the immediate condition but also ensuring that the root cause has been addressed and that the implemented corrective actions are sustainable and effective in preventing recurrence. This ensures that the underlying issue has been resolved comprehensively. References:
The IIA's International Standards for the Professional Practice of Internal Auditing (Standards), Standard
2500 - Monitoring Progress.
The IIA's Practice Guide on Audit Follow-up.

Entity-level controls set the tone and establish the framework for the overall control environment within an organization. If these controls are poorly designed or deficient, they can undermine the effectiveness of process-level controls, even if those controls are well-designed. Entity-level controls include governance, risk management, and compliance controls that influence the entire organization. Therefore, deficiencies at this level can have a widespread impact, preventing lower-level controls from functioning properly.
Institute of Internal Auditors (IIA), International Standards for the Professional Practice of Internal Auditing (Standards), Standard 2130 - Control.

According to the IIA's Implementation Guide for Standard 2340 - Engagement Supervision1, one of the activities that the chief audit executive or the designated engagement supervisor should perform is to review and approve the engagement work program before the commencement of fieldwork. The engagement work program should be based on the engagement objectives, scope, and approach, and should reflect the risks and controls identified during the planning phase. The engagement work program should also be discussed with the engagement team to ensure that they understand the tasks and procedures to be performed, and to address any questions or concerns. The engagement supervisor should document the approval of the work program and any subsequent changes in the workpapers.