Which of the following is the role of an internal auditor in an organization?

To write the code of ethical business conduct for the organization

To test the system of internal controls in order to attest that there is no material weakness

To establish the controls for the organization

To assist management with the evaluation of internal control correctly in place