An organization does not have a formal risk management function. According to the Standards, which of the following are conditions where the internal audit acti...