Author: Institute of Internal Auditors - UK and Ireland.