1) According to Implementation Standard 1220.A1, internal auditors must exercise due professional care by considering, among other things, the “probability of significant errors, fraud, or noncompliance.”
2) Thus, internal auditors must considering the probability of fraud when developing engagement objectives ( Implementation Standard 2220.A2)