Which of the following would be a legitimate action for the internal auditor to take when monitoring audit engagement results?
1. Disregard a certain risk because management and the board accepted the risk in the past.
2. Abdicate the responsibility for a particular risk because it is not part of the audit plan.
3. Obtain agreement from senior management that unresolved audit issues will be reported to the board.
Request corrective action from management in writing.

Which of the following represents appropriate evidence of supervisory review of engagement workpapers?
1. A supervisor's initials on each workpaper.
2. An engagement workpaper review checklist.
3. A memorandum specifying the nature, extent, and results of the supervisory review of workpapers.
4. Performance appraisals that assess the quality of workpapers prepared by auditors.

Which of the following statements regarding the use of external contracted services by the chief audit executive (CAE) is false?

Which of the following documents should the chief audit executive review and approve?
1. Workpaper retention policy.
2. Audit committee meeting minutes.
3. Internal audit handbook.
4. Quarterly financial statements.

Which of the following statements about assurance maps is correct?