The IIA's Code of Ethics makes it clear that an internal auditor should
"Observe the law and make disclosures expected by the law and the profession"
"Not knowingly be a party to any illegal activity, nor engage in acts that are discreditable to the profession of internal auditing or to the organization"