Author: Institute of Internal Auditors. Research Foundation