If an internal auditor uncovers evidence of fraud, the auditor should:
Document the findings and include them in an audit report
Report findings to the board of directors, the audit committee, and appropriate members of top management
Consult with an attorney on actions appropriate to the particular case
Consider the need for any additional action to disassociate from the fraud