?

Which of the following activities is outside the scope of internal auditing?