Which of the following can be used to integrate cultural risk factors into testing for...

Employee survey results provide direct evidence about perceptions, behaviors, attitudes, and experiences within the organization and therefore can be incorporated into audit testing of cultural risk. Surveys may reveal concerns relating to ethical climate, psychological safety, management behavior, communication, incentives, willingness to report misconduct, or pressure to achieve objectives. These factors may not be visible in formal organizational documentation. Process maps primarily describe workflows and control activities, while organizational charts show formal reporting relationships. A documented governance structure explains official roles and responsibilities but may not reveal how the organization’s culture actually operates in practice. Internal auditors often combine employee feedback with interviews, observations, and other evidence to evaluate culture. Consequently, employee survey results are the most useful choice for explicitly integrating cultural risk factors into engagement testing.