According to IIA guidance, which of the following steps are most important for an internal auditor to perform when evaluating an organization's social and envir...