An organization's external auditor has prepared a list of risks and issues and has recommended to senior management that the internal audit activity focus on th...