Section: Volume C

If an auditor concluded a major audit finding based on hearsay evidence, it indicates a lack of demonstration of due professional care. Due professional care requires that conclusions be based on evidence that is sufficient, reliable, relevant, and useful to support audit findings and recommendations. Relying on hearsay does not meet these criteria and undermines the audit's reliability and credibility.References: IIA standards related to due professional care, which dictate that internal auditors must gather adequate factual evidence to support their findings and conclusions.

Section: Volume D
Explanation

According to IIA guidance, the internal audit activity should refrain from indicating conformance with the Standards until all areas of nonconformance identified in a quality assessment have been addressed and the chief audit executive has confirmed this to the audit committee. This ensures that the internal audit activity only claims conformance when it fully meets the Standards, maintaining the credibility of the audit function.References: Institute of Internal Auditors (IIA) - International Standards for the Professional Practice of Internal Auditing, and guidance on external quality assessments.

Facilitating a self-assessment of the organization's business risk and control identification is most likely to be classified as a consulting engagement. This type of activity involves helping the organization with advice and assistance to manage and improve its risk management, control, and governance processes, which aligns with the definition of consulting services provided by internal auditors.References: Institute of Internal Auditors (IIA) - International Professional Practices Framework (IPPF)