Internal audit resources should be appropriate; sufficient, and effectively deployed. Consequently,

Resource planning should be limited to expected activities.

The chief audit executive should perform a periodic skills assessment.

Only members of the internal audit staff should perform internal audit activities.

The chief audit executive ultimately must ensure the adequacy of resources.