What role, if any, should the internal audit activity have in the process of following up on observations and recommendations made by the external auditors?

Noncompliance with which of the following would cause a control deficiency related to privacy protection practices?
I. An organization's internal privacy policies.
II. Financial accounting standards.
III. Privacy laws and regulations.
IV. The Standards.

Which of the following responsibilities would fall under the role of the chief audit executive, rather than internal audit staff or the audit manager?

Which of the following actions by the internal audit activity provides strong evidence that it is organizationally independent?

Which of the following is not an appropriate role for internal auditors after a disaster occurs?