The chief audit executive (CAE) has been asked to manage the regulatory compliance function for the organization's retail store operations. Store operations are included in the annual audit plan.
Which of the following strategies best fulfills the requirements of the Standards regarding these audits?

Which of the following would not be a red flag for fraud?

Management is developing and implementing a risk and control framework for use throughout the organization. Which of the following elements should be included in the organization's control framework?
1. Appropriate levels of authority and responsibility.
2. Supervision of staff and appropriate review of work.
3. The seniority of management in the organization.
4. The ability to trace each transaction to an accountable and responsible individual.

Which of the following would be the most important consideration by the internal audit activity when selecting employees to perform an internal quality assessment?

When conducting an interview, an internal auditor is most likely to ask open-ended questions in order to: