1.As an external auditor, will you consider assessing the control risk at a high level?

2.Is the reliance on the work of internal auditor enough to support your assessment in number 1?

3.What are the possible conflict and its impact to the internal control?

4.What would you recommend the management about this conflict?

5.Propose a program / policy to address the issues.