Which of the following methods achieves the independence of the internal audit activity, as per IIA guidance?