Comprehensive and Detailed Step-by-Step Explanation:
* Reference to IIA Standards:
* Standard 1210 - Proficiency: Internal auditors must possess the necessary knowledge, skills, and competencies to conduct audits effectively.
* The auditor should have the relevant expertise to evaluate investment-related test attributes.
* Reasoning:
* Option A is correct because the auditor has direct knowledge and expertise in investments, making them the most qualified to determine the relevant test attributes for the audit.
* Option B (IT audit experience) does not align with the specific skills required for investment auditing.
* Option C (previous experience) may offer some advantage, but the lack of familiarity with the current organization's processes limits the auditor's effectiveness.
* Importance of Expertise:
* Selecting an auditor with relevant experience and proficiency ensures that the audit will be conducted with accuracy and that the proper test attributes will be identified.

Comprehensive and Detailed Step-by-Step Explanation:
* Address Matches an Employee's Residence: This is a strong indicator of fraud, as it suggests the possibility of a fictitious vendor created to divert funds to the employee.

Comprehensive and Detailed Step-by-Step Explanation:
* Risk Assessment in Planning: Conducting a risk assessment typically follows documentation of the process, as understanding the process provides the necessary context for identifying and evaluating risks.

Comprehensive and Detailed Step-by-Step Explanation:
* Definition of Detective Controls:
* Detective controls are designed to identify errors, irregularities, or fraudulent activities after they occur, enabling corrective action.
* Reasoning:
* Option B is correct because reconciliations compare records (e.g., bank statements against ledgers) to detect discrepancies.
* Option A (segregation of duties) and Option C (required authorizations) are preventive controls designed to stop errors or fraud before they occur.
* Role of Detective Controls:
* Detective controls play a critical role in monitoring and identifying issues, supporting the overall control environment.

Comprehensive and Detailed Step-by-Step Explanation:
* Reference to IIA Standards:
* Standard 1210 - Proficiency: The internal audit activity must possess or obtain the knowledge, skills, and competencies needed to perform its responsibilities effectively.
* If internal expertise is lacking, external resources or subject matter experts should be engaged.
* Reasoning:
* Option A is correct because collaborating with an internal expert ensures that the audit is performed competently while addressing the health and safety risks comprehensively.
* Option B (amending the scope) avoids addressing critical risks, which may undermine the value of the audit.
* Option C (relying on management's risk assessment) is inappropriate, as the internal audit function must independently evaluate the area.
* Mitigating Lack of Expertise:
* Leveraging subject matter experts ensures compliance with professional standards and the integrity of the audit process.