An internal auditor for a financial institution has just completed an audit of loan processing. Of the 81 loans approved by the loan committee, the auditor found seven loans which exceeded the approved amount.
Which of the following actions would be inappropriate on the part of the auditor?
During a systems development audit, software developers indicated that all programs were moved from the development environment to the production environment and then tested in the production environment.
What should the auditor recommend?
After completing a fraud investigation but before publishing a formal written report, the chief audit executive should submit a draft of the final report to the organization's:
Senior management of an organization has requested that the internal audit activity provide ongoing internal control training for all managerial personnel. This is best addressed by: