1. How do auditors determine their conclusions are reasonable?  

 

2. Should individual audit findings be risk ranked?  Do you recommend including an overall 'Audit Opinion' in the Audit Report?  What are the arguments for and against risk rankings and overall opinions? 

 

3. Some internal audit departments are moving away from the traditional audit report format.  What are some of the different report formats being used by internal auditors?  What are some of the advantages and disadvantages of each?