According to IIA guidance, senior management and the board have ultimate responsibility for which of the following aspects of internal audit resource management...