Which of the following statements is true regarding assurance and advisory services provided by an internal audit function?