According to the IIA Standards, internal auditors must have sufficient knowledge to evaluate the risk of fraud and the manner in which IT is managed. This includes understanding their organization's IT governance, risk, and control processes (Option D). Standard 1210.A3 specifies that internal auditors must have sufficient knowledge of key information technology risks and controls and available technology-based audit techniques to perform their assigned work. This ensures that auditors can effectively assess and contribute to the improvement of the organization's IT governance and control environment.
IIA Standards, Standard 1210.A3: Proficiency - Technology-based Audit Techniques IIA's International Professional Practices Framework (IPPF)

The most suitable approach for an organization with limited resources to spend on corporate social responsibility (CSR) initiatives is to select initiatives that support the overall strategic goals of the organization. Aligning CSR initiatives with the organization's strategic goals ensures that resources are used effectively and contribute to long-term value creation. This approach helps in enhancing the organization's reputation, stakeholder engagement, and competitive advantage by focusing on areas where the organization can make the most significant impact in alignment with its mission and values.
The IIA Standards: Standard 2010 - Planning: "The chief audit executive must establish a risk-based plan to determine the priorities of the internal audit activity, consistent with the organization's goals." IIA Practice Guide: "Assessing Organizational Governance in the Public Sector": Highlights the importance of aligning initiatives with strategic goals for effective governance.

Section: Volume A

Section: Volume C