The scope of internal auditing