Which of the following best describes the approach the internal audit activity should take to assess and make appropriate recommendations to improve the organiz...