The IIA Code of Ethics states that integrity is fundamental and describes behaviors such as honesty and responsibility. In this scenario, being completely honest with operational management about unfavorable audit results exemplifies the principle of integrity.References: The Institute of Internal Auditors (IIA) "Code of Ethics", which details the principles and expectations for the professional practice of internal auditing, including integrity as a key principle.

By not raising an audit finding about the organization failing to make a legally required disclosure, the internal auditor violated the principle of Integrity. This principle requires auditors to perform their work honestly, diligently, and responsibly. Ignoring a legal requirement compromises the auditor's integrity, as it involves a deliberate omission of relevant facts.
* Option A: Objectivity involves maintaining impartiality, which is related but not directly relevant to this situation.
* Option C: Proficiency pertains to having the necessary knowledge and skills.
* Option D: Confidentiality involves respecting the value and ownership of information received.
References:
* IIA Code of Ethics: Integrity.
* IIA Standards of Professional Practice.

In situations where proper segregation of duties is not achievable due to insufficient staffing, internal auditors recommend the implementation of compensating controls. Compensating controls are additional procedures or safeguards designed to reduce the risk associated with insufficient segregation of duties. These controls do not prevent errors or fraud from occurring but aim to detect them in a timely manner if they do occur.
For instance, in a small manufacturer where the accounting department cannot separate tasks adequately due to limited staff, the auditor might suggest:
* Enhanced supervisory reviews: Managers or supervisors closely review and approve transactions and reconciliations performed by the staff.
* Periodic independent reviews: Regular audits or reviews by internal auditors or third-party auditors to ensure transactions are proper and in compliance with company policies.
* Use of technology: Implementing automated controls that require multiple approvals for significant transactions.
* Rotation of duties: Regularly rotating employees' responsibilities to prevent familiarity and collusion.
These measures help mitigate the risks that arise from the lack of segregation of duties, providing reasonable assurance that financial records are accurate and that fraud or errors are detected promptly.
References:
* The Institute of Internal Auditors (IIA) Standards and Practice Advisories.
* COSO Internal Control - Integrated Framework.
* "Internal Auditing: Assurance & Advisory Services" by IIA, Chapter on Control Activities and Segregation of Duties.