A. Results of internal assessments need to be reported to the board at least once every five years.
B. The external assessor must present the findings from the external assessment to senior management and the board upon completion.
C. Deficiencies within the internal audit activity must be reported to the board as soon as they are noted
D. Results of ongoing monitoring of the internal audit activity’s performance must be reported to senior management and the board at least annually
Explanation:
The IIA's International Standards for the Professional Practice of Internal Auditing (Standards) provide guidance on the reporting requirements of the quality assurance and improvement program. According to Standard 1320, "The chief audit executive must communicate the results of the quality assurance and improvement program to senior management and the board." This communication must include the results of both internal and external assessments and ongoing monitoring. Specifically, the results of ongoing monitoring of the internal audit activity’s performance should be reported to senior management and the board at least annually. This ensures that the internal audit activity maintains its proficiency, enhances its effectiveness, and complies with the Standards.
Reference: IIA Standard 1320