Author: Institute of Internal Auditors.