Which of the following statements best reflects the responsibilities of an internal audit?