While attending a conference, an internal auditor won an all-expense paid trip sponsored by a vendor of the internal auditor's organization.
Which of the following actions are most appropriate for the auditor to take?

What type of risk management strategy is being employed when an organization installs two firewalls to provide protection from unauthorized access to the network?

According to IIA guidance, which of the following statements is false regarding continuing professional education for the internal audit activity (IAA)?

During an audit engagement, the internal auditor discussed a risk mitigation recommendation with the manager of the area under review. The manager disagreed with the risk assessment and recommendation. The two failed to come up with an alternative solution, and the auditor decided to proceed with including the original recommendation in the engagement report. Which of the following is especially important in dealing with this type of situation?

When conducting an interview, an internal auditor is most likely to ask open-ended questions in order to: