According to IIA guidance, which of the following is the first step the internal audit activity undertakes in determining the effectiveness of an organization's...