Which of the following best describes the internal audit activity's responsibility within a risk and control framework?

An organization employs ongoing monitoring and is considering implementing periodic evaluations to assess the continuing effectiveness of its risk management process. Which of the following statements Is true with regard to such periodic evaluations?

Which of the following is true regarding the stakeholder theory of corporate social responsibility?

An internal auditor assigned to a supplier management process engagement reviews the risk assessment with the process owner The auditor inquires about the risk response for potentially engaging unqualified third-party service providers The process owner responds that due diligence checks are undertaken to make sure that third parties possess requisite competencies before they are engaged Which of the following risk management techniques is the process owner using?

According to NA guidance, which of the following actions by the chief audit executive would best ensure that internal auditors demonstrate due professional care?