The internal audit function should wait until issues related to fraud arise before communicating with senior management or the board of directors about the topic

The internal audit function should avoid communicating with the board of directors about fraud, as that is the responsibility of the external auditors

The internal audit function should not disclose the results of its fraud audits to senior management or the board of directors in order to maintain independence

The internal audit function should periodically report about the organization’s fraud risks to senior management and the board of directors