According to IIA guidance, which of the following types of assessments are appropriate for meeting the requirements of a quality assurance and improvement progr...