Internal auditors sometimes express opinions in addition to stating observations in their reports. Due professional care requires that internal audit opinions be:
a. Based on sufficient appropriate evidence.
b. Limited to the effectiveness of internal controls.
c. Expressed only when requested by management or the audit committee.
d. Based on experience and free from errors in judgment.