Internal auditing is responsible for reporting fraud to senior management or the board when

The incidence of fraud of a material amount has been established to a reasonable certainty.

Suspicious activities have been reported to internal auditing.

Irregular transactions have been identified and are under investigation.

The review of all suspected fraud related transactions is complete.