IIA-CIA-Part2 Exam Question 331

Which of the following should an internal auditor document to support an assurance engagement's conclusions?