Premise: Internal audit organizations do not have a duty to report outside that entity unless required by law, rule, regulation, or policy.

Hypothesis: Many states have implemented laws to require outside reporting.
Relation: neutral