a. During the meeting with Cal Power’s internal audit group, Gene learns that the internal audit group’s focus has shifted significantly from operational audits to Sarbanes-Oxley Section 302 and 404 compliance. Section 302 deals with management’s responsibility over financial reports, and Section 404 deals with management’s assessment of internal control. Once again, Gene asks himself, “How can the internal audit department assist in Section 302 and 404 compliance and still claim independence from management?” According to the IIA’s position paper entitled Internal Auditing’s Role in Section302 and 404 of the U.S. Sarbanes-Oxley Act of 2002, which SOX-related activities are appropriate and which are inappropriate for the internal audit group to perform?
b. How do these activities fit within the concept of objectivity, which is the hallmark of an internal auditor’s independence?