An internal audit activity is performing a governance engagement. Which of the following would provide the best evidence for an internal auditor when evaluating the organization’s culture?
A.
Personnel and customer surveys, actual reports, and due diligence results regarding third-party governance practices.
B.
Details on mandatory reporting to third parties, disclosure committee charter and responsibilities, and the internal communication system.
C.
Succession plans, development programs, and job descriptions with responsibilities and authorities.
D.
Ethics and integrity policy; structured interviews with employees; and established and communicated values, mission, and vision.
Evaluating organizational culture requires insights into ethics, values, and behavior. The combination of the ethics policy, structured employee interviews, and communicated organizational values provides a comprehensive view, as recommended by IIA standards for governance audits.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit