Comprehensive and Detailed Step-by-Step Explanation:
* Competency Principle: According to the IIA Code of Ethics, internal auditors must apply the knowledge, skills, and experience needed to perform their duties effectively.
* Key Characteristics: Continuous improvement in proficiency, quality of services, and effectiveness directly align with the principle of competency.

Comprehensive and Detailed Step-by-Step Explanation:
* Control Self-Assessment (CSA): This tool involves management and staff in evaluating controls and risks, fostering collaboration between operational teams and internal audit. CSA supports shared responsibility for risk management and control improvement.

Comprehensive and Detailed Step-by-Step Explanation:
* Reference to IIA Standards:
* Standard 2130 - Control: Internal auditors must assess both the adequacy of control design and the effectiveness of control operation.
* Reasoning:
* Option B is correct because a poorly designed control, even if operating effectively, cannot achieve its objective due to inherent flaws in its structure or implementation.
* Option A incorrectly suggests that operational testing overrides design inadequacies. Evaluating control design is essential before assessing operational effectiveness.
* Option C is incorrect because reliance on secondary controls to mitigate risk does not compensate for an inadequate primary control design.
* Control Design Importance:
* Adequate design ensures that controls are appropriately structured to address specific risks, providing a strong foundation for effective operation.

Comprehensive and Detailed Step-by-Step Explanation:
* Enhancing Relationships: Status meetings facilitate two-way communication, keeping management informed about audit progress and fostering collaboration. Open discussions during these meetings help address concerns and strengthen the relationship between internal audit and management.

Comprehensive and Detailed Step-by-Step Explanation:
* Opportunity: In the Fraud Triangle, "opportunity" refers to the ability to commit fraud due to weaknesses in internal controls, such as poor segregation of duties, lack of oversight, or inadequate monitoring systems. These factors are directly within the organization's control to address.