During an operational audit of the cash receipts process, internal auditors uncovered many red flags...

The audit team that conducted the operational audit must also conduct the investigative audit.

The investigative audit must be conducted by an independent third-party service provider.

To preserve objectivity, auditors who participated on the initial operational audit engagement team must not partake in the investigative audit.

The investigative audit engagement team must include at least one auditor who possesses fraud-related skills and competencies.