Thus, an important question implied by Propositions 6a and 6b is how internal audit can maintain the level of professional skepticism required to maintain independence and objectivity but interact with the information security function in a collaborative, rather than confrontational, manner