Which of the following policies promotes internal audit objectivity?

According to IIA guidance, which of the following statements is true regarding the internal audit activity's responsibilities in providing consulting services?

A newly hired internal auditor is performing an engagement that requires significant IT expertise that he does not possess. If the auditor does not alert the chief audit executive about his lack of expertise and decides to perform the engagement anyhow, which principle of the IIA's Code of Ethics would he violate?

While conducting an engagement in the procurement department, the internal auditor noticed that the department head's travel reports showed minor travel expenses, and there were no charges for hotels, meals, or transportation. However, the auditor knew that the department head frequently traveled worldwide to meet with suppliers and visit their production sites. Which of the following would be the most appropriate next step for the auditor?

Internal controls belong to which risk response category?