Which of the following best describes the primary purpose of conducting an internal audit as part of the CAP’s responsibilities?