?

Which one of the following best represents an example of information that internal auditors should report to the board of directors?