The results of an assessment of the adequacy of controls would be considered incomplete or misleading unless the internal auditor considers which of the following?

According to IIA guidance, which of the following corporate social responsibility (CSR) evaluation activities may be performed by the internal audit activity?
1. Consult on CSR program design and implementation.
2. Serve as an advisor on CSR governance and risk management.
3. Review third parties for contractual compliance with CSR terms.
4. Identify and mitigate risks to help meet the CSR program objectives.

In which of the following scenarios would it be appropriate for the chief audit executive (CAE) to report that the internal audit activity conforms with the Standards?

Which of the following engagements would be considered an appropriate consulting service?

Which of the following would most likely be classified as a consulting engagement?