IIA-CRMA Exam Question 96

According to IIA guidance, which of the following should be formally documented in the internal audit charter?