Which of the following best demonstrates the authority of the internal audit activity?