Which of the following best ensures the independence of the internal audit activity?

1. The CEO and audit committee review and endorse any changes to the approved audit plan on an annual basis.

2. The audit committee reviews the performance of the chief audit executive (CAE) periodically.

3. The internal audit charter requires the CAE to report functionally to the audit committee.