An internal auditor was reviewing the procurement departments tender documentation for completeness. He documented all discrepancies, but the procurement manager disagreed with his findings. Upon review, the internal auditor noted that all discrepancies had been corrected in the tender database. Which of the following courses of action would have prevented this situation?

a. The auditor should have ensured the preservation of audit evidence by taking screenshots or extracting lender documents

b. The auditor should have ensured the preservation of audit evidence by taking screenshots of extracting tender documents

c. The auditor should have instructed procurement workers that changes to the database during the course of the audit were strictly forbidden

d. The internal auditor should have created a more thorough work program, which would address audit criteria and potential causes in more detail

An internal auditor was asked by the chief risk officer (CRO) to assist in updating the risk universe for IT network operations. During the engagement, an old server failed, and it was determined that replacing it would require significant changes to the network. Which of the following statements describes the most suitable course of action to be taken by the auditor?

a. Draft a formal communication informing the CRO that internal audit activities will resume once the situation has been resolved

b. Communicate the finding to the CRO at the next scheduled update meeting and continue with other aspects of the engagement

c. Call a formal status meeting to inform the CRO of the server issue and develop alternative engagement plans

d. Compile a report describing the various impacts of the situation for distribution to the CRO and IT management, and suspend activity pending their decisions