Evidence discovered during the course of an engagement suggests that multiple incidents of fraud have...

IIA Standards on Fraud:

Standard 2120 – Risk Management: Internal auditors must evaluate the potential for the occurrence of fraud and how the organization manages fraud risk.

Immediate Response: When evidence of fraud is discovered, the internal auditor must ensure that appropriate actions are taken promptly.

Next Steps for Internal Auditor:

Consult with Supervisor: The internal auditor should discuss the findings with the engagement supervisor. This ensures that the situation is assessed by a more experienced individual who can determine the next steps, including the need for specialized fraud investigation resources.

Specialized Expertise: Determining whether fraud investigation experts are needed is crucial for handling the matter appropriately, as they possess the necessary skills to investigate complex fraud cases.

Documenting Evidence:

While documenting the evidence and recommending controls is important (Option C), the immediate step should involve consultation with the supervisor to decide on the investigation approach.

Notifying management directly (Option A) or law enforcement (Option D) should follow internal protocols and often occur after consultation with the supervisor and possibly higher-level approvals.

References:

Engaging the engagement supervisor ensures that the appropriate steps are taken to investigate the fraud properly, aligning with professional standards and ensuring a thorough investigation​​​​.