Absolute Free CFE-Fraud-Prevention-and-Deterrence Exam Practice for Comprehensive Preparation 

The internal audit function should discuss how and when to report fraud-related issues with senior management and the board of directors before such issues arise.

The internal audit function is permitted, but not required, to periodically report about the organization's fraud risks to senior management and the board of directors.

The internal audit function should not disclose the results of its fraud audits to senior management or the board of directors in order to maintain independence

The internal audit function is not permitted to communicate with the board of directors about fraud, as that is the responsibility of external auditors.