Comprehensive and Detailed Explanation From Exact Extract:
Lagging indicators measure outcomes after the fact, while leading indicators provide predictive insight.
Return on investment (ROI) is the most lagging because it measures financial performance after investments and operations have already occurred.
* Customer retention (B) and employee satisfaction (C) are more intermediate indicators.
* Cost of R&D (D) is a leading indicator, as it influences future innovation.
Thus, ROI is the most lagging indicator.

Comprehensive and Detailed Explanation:
An effective ethics program requires clear policies, communication, monitoring, and investigation procedures. To evaluate its adequacy, the auditor should examine established investigation protocols (B)
- i.e., how allegations of misconduct are handled, investigated, and resolved. The strategic plan (A) is high- level and does not directly address ethics processes. The overall budget (C) is too broad, and officer remuneration (D) is not core evidence of program quality. According to IIA guidance, assessing the ethics program involves verifying that mechanisms exist for reporting, investigating, and addressing ethical issues
. Therefore, the most relevant scope element is Option B.

When employees continue to violate segregation-of-duty controls despite previous recommendations, the most effective approach is to recommend appropriate awareness training. This training can help employees understand the importance of these controls and how to comply with them, addressing the root cause of the violations. References: = IIA Standard 2130 - Control and IIA Practice Guide: "Auditing Segregation of Duties".

In the context of an internal audit observation, the cause component should be added to explain why the subsidiary has thousands of client contracts on paper instead of in the required electronic system. The cause helps identify the root reason behind the non-compliance with the organization's rules of record management.
In this case, the cause could be the lack of sufficient assistants to scan the contracts into the system. Including the cause in the observation provides clarity on the underlying issues and helps in formulating effective recommendations to address the problem.
:
The Institute of Internal Auditors (IIA) Standard 2410.A1 - Criteria for Communicating: "Final communication of engagement results must, where appropriate, contain the internal auditors' overall opinion and/or conclusions." IIA Practice Guide on "Root Cause Analysis"

The organization's ongoing risk monitoring process is the most critical factor because risk management is a continuous activity. The Chief Audit Executive (CAE) must ensure that identified risks are addressed within the context of ongoing risk monitoring. This enables management to take corrective action and integrate risk mitigation into strategic planning.
* The organization's attitude to hierarchy (A) may influence communication effectiveness but does not determine risk response.
* The organization's whistleblowing strategy (B) relates more to reporting misconduct rather than managing identified risks.
* The organization's risk management policy (D) sets overall guidelines, but ongoing risk monitoring ensures practical application.
Reference:IIA's International Standards for the Professional Practice of Internal Auditing (Standards) - Standard 2120: Risk Management.