Which type of control is designed to directly mitigate internal and external risks at the organization wide level, furthering the achievement of many overall organizational objectives?

According to IIA guidance,which of the following statements is true regarding the reporting of results from a quality assurance and improvement program review of the internal audit activity?

Which of the following methods is not valid for completing continuing professional education hours?